CVE-2007-3895: Buffer Overflow
Published Dec 12, 2007
·Updated
Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.
Affected Software
16 affected components
Microsoft Windows 2000=sp4
Microsoft DirectX=7.0
Microsoft DirectX=8.1
Microsoft Windows 2003 Server
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=sp1
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows 2003 Server=sp2
Microsoft Windows XP
Microsoft Windows XP=sp2
Microsoft Windows XP=sp2
Microsoft DirectX=9.0c
Microsoft Windows Vista=gold
Microsoft Windows Vista=gold
Microsoft DirectX=10.0
Remediation
Patch Available
Event History
Dec 12, 2007
CVE Published
12:46 AM
Data Sourced
12:46 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3895?
CVE-2007-3895 is rated as a critical vulnerability due to potential remote code execution.
2
How do I fix CVE-2007-3895?
To fix CVE-2007-3895, ensure that all software using Microsoft DirectShow is updated to the latest versions provided by Microsoft.
3
What versions of DirectX are affected by CVE-2007-3895?
CVE-2007-3895 affects Microsoft DirectX versions 7.0 through 10.0.
4
Can exploitation of CVE-2007-3895 lead to data theft?
Yes, exploitation of CVE-2007-3895 can potentially lead to data theft as it allows remote attackers to execute arbitrary code.
5
What file types can trigger CVE-2007-3895?
CVE-2007-3895 can be triggered by crafted WAV or AVI files.