Back to CVE Browser

CVE-2008-1444

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0640%

EPSS Percentile8.75th

PublishedJun 12, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."

Affected Platforms (CPE)

📦

Microsoft

Directx

= 9.0

📦

Microsoft

Directx

= 10.0

📦

Microsoft

Directx

= 7.0

📦

Microsoft

Directx

= 8.1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=121380194923597&w=2

🔗 http://secunia.com/advisories/30579

🔗 http://securityreason.com/securityalert/3937

🔗 http://securitytracker.com/id?1020223

🔗 http://www.securityfocus.com/archive/1/493250/100/0/threaded

🔗 http://www.securityfocus.com/bid/29578

🔗 http://www.us-cert.gov/cas/techalerts/TA08-162B.html

🔗 http://www.vupen.com/english/advisories/2008/1780

Related Vulnerabilities

CVE-2019-568410.0

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader ...

CVE-2020-61029.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....

CVE-2020-61019.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....

CVE-2020-61039.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....