GCVE - cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Directx (`213e3ab2-47e2-5dcd-a271-9107611d1255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1537`	vulnerable	2026-06-08 05:00:49.266125	Details available Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability." Published: 2012-12-12T00:00:00.000Z Updated: 2024-08-06T19:01:01.881Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-346A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-082 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16086	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1880`	vulnerable	2026-06-08 04:54:10.882921	Details available Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability." Published: 2010-06-08T22:00:00.000Z Updated: 2024-08-07T01:35:53.959Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6641 http://osvdb.org/65222 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 http://www.us-cert.gov/cas/techalerts/TA10-159B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1879`	vulnerable	2026-06-08 04:54:10.876894	Details available Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability." Published: 2010-06-08T22:00:00.000Z Updated: 2024-08-07T01:35:53.791Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7517 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-033 http://www.us-cert.gov/cas/techalerts/TA10-159B.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1539`	vulnerable	2026-06-08 04:51:23.916088	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, which allows remote attackers to execute arbitrary code via a crafted file, aka "DirectX Size Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.447Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 http://osvdb.org/55845 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6341 http://www.vupen.com/english/advisories/2009/1886 http://www.us-cert.gov/cas/techalerts/TA09-195A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1538`	vulnerable	2026-06-08 04:51:23.914420	Details available The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability." Published: 2009-07-15T15:00:00.000Z Updated: 2024-08-07T05:20:33.434Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5963 http://osvdb.org/55844 http://www.vupen.com/english/advisories/2009/1886 http://www.securityfocus.com/bid/35600	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1537`	vulnerable	2026-06-08 04:51:23.908498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0084`	vulnerable	2026-06-08 04:51:07.599217	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1444`	vulnerable	2026-06-08 04:50:20.539220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0011`	vulnerable	2026-06-08 04:50:09.932485	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.