Intrusion PreventionMS.DirectShow.Null.Byte.Overwrite
Description
This indicates an attempt to exploit a NULL-byte-overwrite vulnerability in Microsoft DirectShow.
The vulnerability is caused by an error that occurs when the affected software handles specially crafted QuickTime files. Successful exploitation may lead to remote code execution.
Affected Products
DirectX 7.0 on Microsoft Windows 2000 Service Pack 4
DirectX 8.1 on Microsoft Windows 2000 Service Pack 4
DirectX 9.0* on Microsoft Windows 2000 Service Pack 4
DirectX 9.0* on Windows XP Service Pack 2 and Windows XP Service Pack 3
DirectX 9.0* on Windows XP Professional x64 Edition Service Pack 2
DirectX 9.0* on Windows Server 2003 Service Pack 2
DirectX 9.0* on Windows Server 2003 x64 Edition Service Pack 2
DirectX 9.0* on Windows Server 2003 with SP2 for Itanium-based Systems
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
See the Microsoft Security Advisory for this issue:
http://www.microsoft.com/technet/security/advisory/971778.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17462 |
| Created | Jun 08, 2009 |
| Updated | Nov 22, 2022 |
| Risk |
|
| CVE ID | CVE-2009-1537 |
| Exploit Prediction Score | 72.75% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |