Leírás
A termék bemenetet kap egy felsőbb szintű komponensből, azonban nem semlegesíti, vagy hibásan semlegesíti a NUL karaktereket (null bájtokat), amikor azokat egy alsóbb szintű komponens felé továbbítja.
CVE-2009-1537
Alapadatok
Súlyosság
Magas
Publikálás dátuma
2009. 05. 29.
Érintett rendszerek
CWE
CVSS vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Hálózatról kihasználható
- Alacsony komplexitás
- Nem szükséges jogosultság
- Felhasználói interakció szükséges
Érintett rendszerek és verzióik
cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
Hivatkozások
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028
http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237
http://secunia.com/advisories/35268
http://www.securitytracker.com/id?1022299
http://www.vupen.com/english/advisories/2009/1886
http://www.vupen.com/english/advisories/2009/1445
http://osvdb.org/54797
http://www.securityfocus.com/bid/35139
http://www.us-cert.gov/cas/techalerts/TA09-195A.html
http://isc.sans.org/diary.html?storyid=6481
http://www.microsoft.com/technet/security/advisory/971778.mspx
http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx
https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1537
http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237
http://secunia.com/advisories/35268
http://www.securitytracker.com/id?1022299
http://www.vupen.com/english/advisories/2009/1886
http://www.vupen.com/english/advisories/2009/1445
http://osvdb.org/54797
http://www.securityfocus.com/bid/35139
http://www.us-cert.gov/cas/techalerts/TA09-195A.html
http://isc.sans.org/diary.html?storyid=6481
http://www.microsoft.com/technet/security/advisory/971778.mspx
http://blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx
https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1537