• info
• discussion
• exploit
• solution
• references

Microsoft DirectX DirectShow MJPEG Video Decompression Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the references for details.


Microsoft DirectX 8.1

• Microsoft Security Update for DirectX 8 for Windows 2000 (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0ec5b7c7-13d3 -467a-b24e-3cc6fb47adf6

Microsoft DirectX 9.0

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8b98ed5c-a3ab -45a7-a61e-349eae304bc6


• Microsoft Security Update for Windows Server 2003 (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c1b4cd76-1dd6 -43fa-bb9a-20c428985bfd


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8f36c215-fa8a -40c2-b680-6b1fece03b8d


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f0e1e1db-94a5 -451c-ab11-6b431fa065f1


• Microsoft Security Update for Windows XP (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=feb5d821-f210 -40e8-b1aa-2ca3170df8df


• Microsoft Security Update for Windows XP x64 Edition (KB961373)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f1be8b7c-4874 -4342-99b3-76ff725fbb9a