NVD

Id
47426  
Name
CVE-2009-0084  
Description
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-15  
Modified Date
2010-08-21  
Seq
2009-0084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237325 47426 CVE-2009-0084 oval:org.mitre.oval:def:5618  View
237326 47426 CVE-2009-0084 http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm  View
237327 47426 CVE-2009-0084 MS09-011  View
237328 47426 CVE-2009-0084 http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt  View
237329 47426 CVE-2009-0084 34460  View
237330 47426 CVE-2009-0084 1022040  View
237331 47426 CVE-2009-0084 TA09-104A  View
237332 47426 CVE-2009-0084 ADV-2009-1025  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40202 JVNDB-2009-001208 Microsoft DirectX の DirectShow における任意のコードを実行される脆弱性 Microsoft DirectX の DirectShow には、MJPEG ファイルまたはビデオストリームの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0084 37515 CVE-2009-0084 47426 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001208.html 2009-04-14 2009-05-13 View