CVE-2013-0077: Code Injection
Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0077?
CVE-2013-0077 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2013-0077?
To fix CVE-2013-0077, install the security updates provided by Microsoft for the affected Windows versions.
Which Windows versions are affected by CVE-2013-0077?
CVE-2013-0077 affects Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008 with specific service packs.
What kind of attacks can exploit CVE-2013-0077?
CVE-2013-0077 can be exploited through crafted media content, such as media files, streams, or Microsoft Office documents.
Are there any prerequisites for exploiting CVE-2013-0077?
Exploiting CVE-2013-0077 requires the attacker to lure the victim into opening malicious media content.