CVE-2007-3901 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3901
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3901

Description: Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38721 ST 1019073 SAID Secunia Advisory: SA28010 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4520 MS http://www.microsoft.com/technet/security/bulletin/MS07-064.mspx MILW0RM http://www.milw0rm.com/exploits/4866 ISS http://www.iss.net/threats/280.html IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632 HP http://www.securityfocus.com/archive/1/archive/1/485268/100/0/threaded CERT-VN 804089 CERT http://www.us-cert.gov/cas/techalerts/TA07-345A.html BID 26789

Return to the previous page.