CVE-2007-3901: Buffer Overflow
Published Dec 12, 2007
·Updated
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.
Affected Software
23 affected components
Microsoft Windows 2000
Microsoft Windows 2003 Server=datacenter_edition
Microsoft Windows 2003 Server=enterprise_edition
Microsoft Windows 2003 Server=standard
Microsoft Windows 2003 Server=web_edition
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows XP
Microsoft DirectX=5.2
Microsoft DirectX=6.1
Microsoft DirectX=7.0
Microsoft DirectX=7.0a
Microsoft DirectX=7.1
Microsoft DirectX=8.0
Microsoft DirectX=8.0a
Microsoft DirectX=8.1
Microsoft DirectX=8.1a
Microsoft DirectX=8.1b
Microsoft DirectX=8.2
Microsoft DirectX=9.0a
Microsoft DirectX=9.0b
Microsoft DirectX=9.0c
Microsoft DirectX=10.0
Event History
Dec 12, 2007
CVE Published
12:46 AM
Data Sourced
12:46 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3901?
CVE-2007-3901 is classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-3901?
To fix CVE-2007-3901, ensure that you apply the latest security updates from Microsoft for all affected versions of DirectX.
3
What software is affected by CVE-2007-3901?
CVE-2007-3901 affects Microsoft DirectX versions 5.2 through 10.0 across various Windows operating systems.
4
What type of vulnerability is CVE-2007-3901?
CVE-2007-3901 is a stack-based buffer overflow vulnerability in the DirectShow SAMI parser.
5
Can CVE-2007-3901 be exploited remotely?
Yes, CVE-2007-3901 can be exploited remotely by attackers using a crafted SAMI file.