CVE-2007-3901

Related Files

Microsoft DirectX DirectShow SAMI Buffer Overflow

Posted Nov 26, 2009

Authored by MC | Site metasploit.com

This Metasploit module exploits a stack overflow in the DirectShow Synchronized Accessible Media Interchanged (SAMI) parser in quartz.dll. This Metasploit module has only been tested with Windows Media Player (6.4.09.1129) and DirectX 8.0.

tags | exploit, overflow

systems | windows

advisories | CVE-2007-3901

SHA-256 | 20138beebb9160875d7fc9948352ad7b8bb08395bcbaff2c18e18c66b4ff8a77

Download | Favorite | View

iDEFENSE Security Advisory 2007-12-11.2

Posted Dec 12, 2007

Authored by iDefense Labs, Jun Mao | Site idefense.com

iDefense Security Advisory 12.11.07 - Remote exploitation of a stack buffer overflow vulnerability in Microsoft Corp.'s DirectShow could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability exists in the DirectShow SAMI parser, which is implemented in quartz.dll. When the SAMI parser copies parameters into a stack buffer, it does not properly check the length of the parameter. As such, parsing a specially crafted SAMI file can cause a stack-based buffer overflow. This allows an attacker to execute arbitrary code. iDefense has confirmed Microsoft DirectX 7.x and Microsoft DirectX 8.x are vulnerable. Microsoft DirectX 9.0c or newer is not vulnerable.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2007-3901

SHA-256 | 13a7ee86d40260d7b3d9c10a605bff89d2993050d850639780f669cac844978c

Download | Favorite | View