Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:IE:DIRECTX-SAMI-BO |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft DirectX SAMI File Parsing Buffer Overflow |
Release Date |
2009/03/06 |
Update Number |
1382 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Microsoft DirectX SAMI File Parsing Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Microsoft DirectX SAMI File Parsing Library. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.
Extended Description
Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
Affected Products
- Microsoft directx 10.0
- Microsoft directx 7.0
- Microsoft directx 8.1
- Microsoft directx 9.0
References
- BugTraq: 29578
- CVE: CVE-2008-1444
- URL: http://www.microsoft.com/technet/security/Bulletin/MS08-033.mspx