GCVE - cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*

part: a version: 9.0c update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Directx (`213e3ab2-47e2-5dcd-a271-9107611d1255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1880`	vulnerable	2026-06-08 04:54:10.882983	Details available Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability." Published: 2010-06-08T22:00:00.000Z Updated: 2024-08-07T01:35:53.959Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6641 http://osvdb.org/65222 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 http://www.us-cert.gov/cas/techalerts/TA10-159B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1879`	vulnerable	2026-06-08 04:54:10.878759	Details available Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability." Published: 2010-06-08T22:00:00.000Z Updated: 2024-08-07T01:35:53.791Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7517 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 http://www.us-cert.gov/cas/techalerts/TA10-159B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1537`	vulnerable	2026-06-08 04:51:23.910026	Details available Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability." Published: 2009-05-29T18:00:00.000Z Updated: 2026-05-21T03:55:22.095Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237 http://secunia.com/advisories/35268 http://www.securitytracker.com/id?1022299	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0084`	vulnerable	2026-06-08 04:51:07.600902	Details available Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability." Published: 2009-04-15T03:49:00.000Z Updated: 2024-08-07T04:24:17.508Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA09-104A.html http://osvdb.org/53632 http://secunia.com/advisories/34665 http://www.securitytracker.com/id?1022040 http://www.vupen.com/english/advisories/2009/1025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3901`	vulnerable	2026-06-08 04:49:55.351481	Details available Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file. Published: 2007-12-12T00:00:00.000Z Updated: 2024-08-07T14:37:04.892Z Open on db.gcve.eu Reference links http://www.iss.net/threats/280.html http://www.kb.cert.org/vuls/id/804089 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 http://www.securityfocus.com/bid/26789 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3895`	vulnerable	2026-06-08 04:49:55.299575	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.