GCVE - cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Directx (`213e3ab2-47e2-5dcd-a271-9107611d1255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1539`	vulnerable	2026-06-08 04:51:23.916026	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.447Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://osvdb.org/55845 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 http://www.vupen.com/english/advisories/2009/1886 http://www.us-cert.gov/cas/techalerts/TA09-195A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1538`	vulnerable	2026-06-08 04:51:23.913345	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.434Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 http://osvdb.org/55844 http://www.vupen.com/english/advisories/2009/1886 http://www.securityfocus.com/bid/35600	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1537`	vulnerable	2026-06-08 04:51:23.905769	Details available Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability." Published: 2009-05-29T18:00:00.000Z Updated: 2026-05-21T03:55:22.095Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237 http://secunia.com/advisories/35268 http://www.securitytracker.com/id?1022299	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1444`	vulnerable	2026-06-08 04:50:20.540941	Details available Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T08:24:41.775Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1780 http://securityreason.com/securityalert/3937 http://securitytracker.com/id?1020223 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 http://www.securityfocus.com/bid/29578	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0011`	vulnerable	2026-06-08 04:50:09.933036	Details available Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T07:32:23.461Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236 http://securitytracker.com/id?1020222 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 http://www.us-cert.gov/cas/techalerts/TA08-162B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3901`	vulnerable	2026-06-08 04:49:55.345987	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3895`	vulnerable	2026-06-08 04:49:55.293908	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0202`	vulnerable	2026-06-08 04:47:48.984232	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0346`	vulnerable	2026-06-08 04:47:21.351638	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.