CVE-2009-1537

Published: May 29, 2009Modified: May 21, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."

Affected (17)

Products: Microsoft: Directx, Windows 2000, Windows 2003 Server, Windows Server 2003, Windows Xp

5 products

Windows 2003 Server

Windows Server 2003

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Directx	Version 7.0
Microsoft Directx	Version 7.0a
Microsoft Directx	Version 7.1
Microsoft Directx	Version 8.1
Microsoft Directx	Version 8.1b

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Microsoft Directx	Version 9.0
Microsoft Directx	Version 9.0a
Microsoft Directx	Version 9.0b
Microsoft Directx	Version 9.0c
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Related CWEs

Improper Neutralization of Null Byte or NUL Character

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.

References (27)

http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx

Source: secure@microsoft.com

Vendor Advisory

http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx

Source: secure@microsoft.com

Vendor Advisory

http://isc.sans.org/diary.html?storyid=6481

Source: secure@microsoft.com

Not Applicable

http://osvdb.org/54797

Source: secure@microsoft.com

Broken Link

http://secunia.com/advisories/35268

Source: secure@microsoft.com

Vendor Advisory

http://www.microsoft.com/technet/security/advisory/971778.mspx

Source: secure@microsoft.com

PatchVendor Advisory

http://www.securityfocus.com/bid/35139

Source: secure@microsoft.com

Broken Link

http://www.securitytracker.com/id?1022299

Source: secure@microsoft.com

Broken Link

http://www.us-cert.gov/cas/techalerts/TA09-195A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2009/1445

Source: secure@microsoft.com

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1886

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

Source: secure@microsoft.com

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237

Source: secure@microsoft.com

Broken Link

http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://isc.sans.org/diary.html?storyid=6481

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://osvdb.org/54797

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/35268

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.microsoft.com/technet/security/advisory/971778.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/35139

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securitytracker.com/id?1022299

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.us-cert.gov/cas/techalerts/TA09-195A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2009/1445

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1886

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1537

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.