CVE

Id
37519  
CVE No.
CVE-2009-0084  
Status
Candidate  
Description
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."  
Phase
Assigned (20090108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
406888 37519 CVE-2009-0084 MISC:http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt  View
406889 37519 CVE-2009-0084 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm  View
406890 37519 CVE-2009-0084 MS:MS09-011  View
406891 37519 CVE-2009-0084 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-011.mspx  View
406892 37519 CVE-2009-0084 CERT:TA09-104A  View
406893 37519 CVE-2009-0084 URL:http://www.us-cert.gov/cas/techalerts/TA09-104A.html  View
406894 37519 CVE-2009-0084 BID:34460  View
406895 37519 CVE-2009-0084 URL:http://www.securityfocus.com/bid/34460  View
406896 37519 CVE-2009-0084 OSVDB:53632  View
406897 37519 CVE-2009-0084 URL:http://osvdb.org/53632  View
406898 37519 CVE-2009-0084 OVAL:oval:org.mitre.oval:def:5618  View
406899 37519 CVE-2009-0084 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5618  View
406900 37519 CVE-2009-0084 SECTRACK:1022040  View
406901 37519 CVE-2009-0084 URL:http://www.securitytracker.com/id?1022040  View
406902 37519 CVE-2009-0084 SECUNIA:34665  View
406903 37519 CVE-2009-0084 URL:http://secunia.com/advisories/34665  View
406904 37519 CVE-2009-0084 VUPEN:ADV-2009-1025  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40198 JVNDB-2009-001204 Microsoft Office の WordPerfect コンバーターにおける任意のコードを実行される脆弱性 Microsoft Office の WordPerfect コンバーターには、文字列の長さを正しく検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0088 37519 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001204.html  View