Remote Code Execution Vulnerability in QuickTime Movie Parser for Microsoft DirectX

CVE-2009-1537

Summary

A security vulnerability exists in the QuickTime Movie Parser Filter within quartz.dll, found in Microsoft DirectX versions 7.0 through 9.0c, affecting Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2. This vulnerability allows remote attackers to execute arbitrary code on the affected system through a crafted QuickTime media file. Attackers may exploit this flaw to take control of the affected system, highlighting the need for timely security updates and user awareness regarding media file execution.

References