• info
• discussion
• exploit
• solution
• references

Microsoft DirectX DirectShow AVI File Parsing Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Quartz 0

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=59a8bc19-02bb -4800-bac1-464f59e1cb7b


• Microsoft Security Update for Windows 2000 (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=16787c93-2c95 -4c13-8492-be1db9d18146


• Microsoft Security Update for Windows 7 (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=4ec49aa2-81df -4e65-80da-6201394c4089


• Microsoft Security Update for Windows 7 for x64-based Systems (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=a8a2519c-3b89 -4987-9473-920adafc78cb


• Microsoft Security Update for Windows Server 2003 (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=983c5484-6321 -4765-97ec-8d42d42d1f70


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=b1a7533a-913f -4054-b579-489a257bae5f


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=7dc20252-6091 -407b-befc-c25e8f5d3fb0


• Microsoft Security Update for Windows Server 2008 (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=5ac0a948-0bdc -4c10-9b88-16a5d7092e47


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=effa638b-cfc1 -4777-8219-7b433ed5e717


• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=2ed23bf5-6217 -413c-a7ba-eccc82139d68


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=a9811baa-1500 -4c73-940b-57f8c5456891


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=362fea40-649b -4471-aad7-db29edd0ac10


• Microsoft Security Update for Windows Vista (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=7130ce0f-df38 -4c96-ac54-cdbff35f03e7


• Microsoft Security Update for Windows Vista for x64-based Systems (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=de7b7c8f-bd0a -4e13-bd58-d95507a6274b


• Microsoft Security Update for Windows XP (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=7ab53be3-3f42 -4e61-a2bc-3ed41d8736ff


• Microsoft Security Update for Windows XP x64 Edition (KB975560)
  http://www.microsoft.com/downloads/details.aspx?familyid=7543e819-cd36 -4e89-9850-60f00c50999d

Microsoft AVI Filter 0

• Microsoft Security Update for Windows 2000 (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=ba110440-10ce -40a0-884a-8b9afd45a3e3


• Microsoft Security Update for Windows Server 2003 (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=cc5150d7-070e -4a87-9c02-d050a8cb2204


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=aec66173-e2c6 -4c39-8d60-8fbef6d7b764


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=db13e99b-2f2a -4474-8d6e-271b025bd07f


• Microsoft Security Update for Windows XP (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=a9beb2bd-e5f6 -43f9-bbcc-a2afee5e5ceb


• Microsoft Security Update for Windows XP x64 Edition (KB977914)
  http://www.microsoft.com/downloads/details.aspx?familyid=dedc3010-a989 -45f7-b9d4-f7079db3e572