Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-1538

EPSS 69.97% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1538

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft DirectX DirectShow指针验证远程代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音 。 DirectX的DirectShow组件(quartz.dll)在更新指针时验证某些值的方式存在远程代码执行漏洞。如果用户打开了特制的QuickTime文件，这个漏洞可能允许代码执行。如果用户以管理权限登录，成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。系统上帐号配置为较少权限的用户比以管理权限操作
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-1538

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1538

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-07-15 · 9 CVEs total

CVE-2009-0231Microsoft Windows EOT字体引擎堆溢出和整数溢出漏洞
CVE-2009-0232Microsoft Windows EOT字体引擎堆溢出和整数溢出漏洞
CVE-2009-0566Microsoft Office Publisher指针引用代码执行漏洞
CVE-2009-1135Microsoft ISA Server绕过Radius OTP认证漏洞
CVE-2009-1136Microsoft Office Spreadsheet ActiveX控件内存破坏漏洞
CVE-2009-1539Microsoft DirectX长度记录解析内存破坏漏洞
CVE-2009-1542Microsoft Virtual PC和Virtual Server本地权限提升漏洞
CVE-2009-2477Mozilla Firefox Tracemonkey组件远程代码执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-1538

No comments yet

Leave a comment