CVE-2009-0084: Code Injection
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0084?
CVE-2009-0084 is considered to have a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2009-0084?
The best way to fix CVE-2009-0084 is to apply the latest security updates and patches provided by Microsoft.
Which software versions are affected by CVE-2009-0084?
CVE-2009-0084 affects Microsoft DirectX versions 8.1 and 9.0, along with certain versions of Windows.
Can CVE-2009-0084 be exploited remotely?
Yes, CVE-2009-0084 can be exploited remotely via a specially crafted MJPEG file or video stream.
What impact can occur if CVE-2009-0084 is successfully exploited?
If exploited, CVE-2009-0084 can lead to arbitrary code execution on the affected system.