GCVE - cpe:2.3:a:microsoft:directx:10.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:directx:10.0:*:*:*:*:*:*:*

part: a version: 10.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Directx (`213e3ab2-47e2-5dcd-a271-9107611d1255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1537`	vulnerable	2026-06-08 05:00:49.267280	Details available Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability." Published: 2012-12-12T00:00:00.000Z Updated: 2024-08-06T19:01:01.881Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-346A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-082 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16086	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1444`	vulnerable	2026-06-08 04:50:20.540387	Details available Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T08:24:41.775Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1780 http://securityreason.com/securityalert/3937 http://securitytracker.com/id?1020223 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 http://www.securityfocus.com/bid/29578	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0011`	vulnerable	2026-06-08 04:50:09.935876	Details available Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a crafted MJPEG stream in a (1) AVI or (2) ASF file, aka the "MJPEG Decoder Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T07:32:23.461Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/1780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236 http://securitytracker.com/id?1020222 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 http://www.us-cert.gov/cas/techalerts/TA08-162B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3901`	vulnerable	2026-06-08 04:49:55.351507	Details available Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file. Published: 2007-12-12T00:00:00.000Z Updated: 2024-08-07T14:37:04.892Z Open on db.gcve.eu Reference links http://www.iss.net/threats/280.html http://www.kb.cert.org/vuls/id/804089 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 http://www.securityfocus.com/bid/26789 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3895`	vulnerable	2026-06-08 04:49:55.301100	Details available Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file. Published: 2007-12-12T00:00:00.000Z Updated: 2024-08-07T14:37:04.983Z Open on db.gcve.eu Reference links http://www.iss.net/threats/280.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 https://exchange.xforce.ibmcloud.com/vulnerabilities/38722 http://www.securityfocus.com/archive/1/485268/100/0/threaded http://www.securitytracker.com/id?1019073	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.