Stack-Based Buffer Overflow in Microsoft DirectX DirectShow Parser

CVE-2007-3901

Summary

A stack-based buffer overflow vulnerability exists in the DirectShow Synchronized Accessible Media Interchange parser within the quartz.dll file of Microsoft DirectX 7.0 to 10.0. This weakness allows remote attackers to execute arbitrary code by crafting a malicious SAMI file, potentially leading to unauthorized control over the affected system. Users are advised to ensure their systems are updated with the latest security patches to mitigate this risk.

References