• info
• discussion
• exploit
• solution
• references

Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability

Solution:
Microsoft has released updates and an advisory to address this issue. Please see the references for more information.


Microsoft DirectX 9.0 c

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=03b14ce0-5189 -4803-8151-6ac5cb6a9179&displaylang=en


• Microsoft Security Update for Windows Server 2003 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d80a295a-baf9 -4981-8a28-1b4207ecc5f7&displaylang=en


• Microsoft Security Update for Windows Server 2003 for IB Systems (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2e6ea4bb-9f4f -46fb-9d51-e20b15e61a89&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=378086ea-60b8 -409f-970a-fcfd62025150&displaylang=en


• Microsoft Security Update for Windows XP (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=04a8f8d3-69f9 -4445-baab-f45616a6b9b7&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f096c500-e765 -4e75-8443-7ffec4ddf149&displaylang=en

Microsoft DirectX 9.0b

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=03b14ce0-5189 -4803-8151-6ac5cb6a9179&displaylang=en


• Microsoft Security Update for Windows Server 2003 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d80a295a-baf9 -4981-8a28-1b4207ecc5f7&displaylang=en


• Microsoft Security Update for Windows Server 2003 for IB Systems (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2e6ea4bb-9f4f -46fb-9d51-e20b15e61a89&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=378086ea-60b8 -409f-970a-fcfd62025150&displaylang=en


• Microsoft Security Update for Windows XP (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=04a8f8d3-69f9 -4445-baab-f45616a6b9b7&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f096c500-e765 -4e75-8443-7ffec4ddf149&displaylang=en

Microsoft DirectX 9.0 a

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2e6ea4bb-9f4f -46fb-9d51-e20b15e61a89&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=378086ea-60b8 -409f-970a-fcfd62025150&displaylang=en


• Microsoft Security Update for Windows XP (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=04a8f8d3-69f9 -4445-baab-f45616a6b9b7&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f096c500-e765 -4e75-8443-7ffec4ddf149&displaylang=en

Microsoft DirectX 10.0

• Microsoft Security Update for Windows Vista (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=bfa571bc-e43f -45e3-bc98-4086985c99aa&displaylang=en


• Microsoft Security Update for Windows Vista for x64-based Systems (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3d8803da-108b -4b9d-a039-84932dce8e42&displaylang=en

Microsoft DirectX 9.0

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=03b14ce0-5189 -4803-8151-6ac5cb6a9179&displaylang=en


• Microsoft Security Update for Windows Server 2003 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d80a295a-baf9 -4981-8a28-1b4207ecc5f7&displaylang=en


• Microsoft Security Update for Windows Server 2003 for IB Systems (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2e6ea4bb-9f4f -46fb-9d51-e20b15e61a89&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=378086ea-60b8 -409f-970a-fcfd62025150&displaylang=en


• Microsoft Security Update for Windows XP (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=04a8f8d3-69f9 -4445-baab-f45616a6b9b7&displaylang=en


• Microsoft Security Update for Windows XP x64 Edition (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f096c500-e765 -4e75-8443-7ffec4ddf149&displaylang=en

Microsoft DirectX 7.0

• Microsoft Security Update for Windows 2000 (KB941568)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=06196774-5a11 -4525-b53c-8cb000738949&displaylang=en