Intrusion PreventionMS.DirectX.Media.SDK6.SourceUrl.ActiveX.Access
Description
This indicates an attempt to exploit a buffer overflow vulnerability in Microsoft DirectX Media SDK.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious "SourceUrl" property. It allows a remote attacker to execute arbitrary code by sending a crafted web page.
Affected Products
Microsoft DirectX Media 6.0 SDK.
Impact
System compromise: remote code execution.
Recommended Actions
Currently we are not aware of any official fix for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-10-27 | 16.950 | Name:MS. DXMedia. SDK6. SourceUrl. ActiveX. Access:MS. DirectX. Media. SDK6. SourceUrl. ActiveX. Access |
| ID | 14881 |
| Created | Aug 13, 2007 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2007-4336 |
| Exploit Prediction Score | 94.92% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |