CyberSec.Space Logo
Back to CVE Browser

CVE-2009-1537

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score40.0300%
EPSS Percentile92.67th
PublishedMay 29, 2009
Last ModifiedMay 21, 2026

Vulnerability Description

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."

Affected Platforms (CPE)

📦
Microsoft

Directx

= 7.0
📦
Microsoft

Directx

= 7.0a
📦
Microsoft

Directx

= 7.1
📦
Microsoft

Directx

= 8.1
📦
Microsoft

Directx

= 8.1b
📦
Microsoft

Directx

= 9.0
📦
Microsoft

Directx

= 9.0a
📦
Microsoft

Directx

= 9.0b
📦
Microsoft

Directx

= 9.0c
💻
Microsoft

Windows 2000

All versions
💻
Microsoft

Windows 2003 Server

All versions
💻
Microsoft

Windows 2003 Server

All versions
💻
Microsoft

Windows 2003 Server

All versions
💻
Microsoft

Windows Server 2003

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions
💻
Microsoft

Windows Xp

All versions

References & Advisories

🔗 http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx
🔗 http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx
🔗 http://isc.sans.org/diary.html?storyid=6481
🔗 http://osvdb.org/54797
🔗 http://secunia.com/advisories/35268
🔗 http://www.microsoft.com/technet/security/advisory/971778.mspx
🔗 http://www.securityfocus.com/bid/35139
🔗 http://www.securitytracker.com/id?1022299

Related Vulnerabilities

CVE-2019-568410.0

NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader ...

CVE-2020-61029.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....

CVE-2020-61019.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....

CVE-2020-61039.9

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20....