GCVE - cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*

part: a version: 8.1 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Directx (`213e3ab2-47e2-5dcd-a271-9107611d1255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1539`	vulnerable	2026-06-08 04:51:23.916070	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.447Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://osvdb.org/55845 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 http://www.vupen.com/english/advisories/2009/1886 http://www.us-cert.gov/cas/techalerts/TA09-195A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1538`	vulnerable	2026-06-08 04:51:23.914395	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.434Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 http://osvdb.org/55844 http://www.vupen.com/english/advisories/2009/1886 http://www.securityfocus.com/bid/35600	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1537`	vulnerable	2026-06-08 04:51:23.907466	Details available Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability." Published: 2009-05-29T18:00:00.000Z Updated: 2026-05-21T03:55:22.095Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237 http://secunia.com/advisories/35268 http://www.securitytracker.com/id?1022299	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0084`	vulnerable	2026-06-08 04:51:07.598568	Details available Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability." Published: 2009-04-15T03:49:00.000Z Updated: 2024-08-07T04:24:17.508Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA09-104A.html http://osvdb.org/53632 http://secunia.com/advisories/34665 http://www.securitytracker.com/id?1022040 http://www.vupen.com/english/advisories/2009/1025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1444`	vulnerable	2026-06-08 04:50:20.541454	Details available Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T08:24:41.775Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1780 http://securityreason.com/securityalert/3937 http://securitytracker.com/id?1020223 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 http://www.securityfocus.com/bid/29578	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0011`	vulnerable	2026-06-08 04:50:09.933604	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3901`	vulnerable	2026-06-08 04:49:55.348534	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3895`	vulnerable	2026-06-08 04:49:55.294547	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0202`	vulnerable	2026-06-08 04:47:48.986975	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0346`	vulnerable	2026-06-08 04:47:21.352842	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.