CVE-2008-1444 Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with craf...
HighCVSS 9.3
EPSS 39.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft directx | = 9.0 | No fix listed |
| Microsoft directx | = 10.0 | No fix listed |
| Microsoft directx | = 7.0 | No fix listed |
| Microsoft directx | = 8.1 | No fix listed |
References
- HPSBST02344 mailing-list vendor-advisory
- 30579 patch third-party-advisory vendor-advisory
- 3937 third-party-advisory
- 1020223 third-party-advisory vdb-entry
- 20080610 ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability mailing-list
- 29578 patch third-party-advisory vdb-entry
- TA08-162B third-party-advisory us-government-resource
- ADV-2008-1780 broken-link vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- MS08-033 vendor-advisory
- oval:org.mitre.oval:def:5562 signature vdb-entry