CVE-2009-1538: Input Validation
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data values, which allows remote attackers to execute arbitrary code via a crafted QuickTime media file, aka "DirectX Pointer Validation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1538?
CVE-2009-1538 is considered a critical vulnerability as it allows remote code execution.
How do I fix CVE-2009-1538?
To fix CVE-2009-1538, install the latest security updates for Microsoft DirectX and Windows.
Which versions of software are affected by CVE-2009-1538?
CVE-2009-1538 affects Microsoft DirectX versions 7.0 through 9.0c, Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2.
Can CVE-2009-1538 be exploited remotely?
Yes, CVE-2009-1538 can be exploited remotely by attackers to execute arbitrary code.
What are the implications of CVE-2009-1538 for users?
Due to CVE-2009-1538, affected users may be at risk of remote exploitation leading to unauthorized access and control over their systems.