CVE-2008-1444

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
References
Link Resource
http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
http://secunia.com/advisories/30579 Patch Vendor Advisory
http://securityreason.com/securityalert/3937 Third Party Advisory
http://securitytracker.com/id?1020223 Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/493250/100/0/threaded
http://www.securityfocus.com/bid/29578 Patch Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-162B.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2008/1780 Broken Link
http://www.zerodayinitiative.com/advisories/ZDI-08-040/ Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562
http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
http://marc.info/?l=bugtraq&m=121380194923597&w=2 Mailing List
http://secunia.com/advisories/30579 Patch Vendor Advisory
http://securityreason.com/securityalert/3937 Third Party Advisory
http://securitytracker.com/id?1020223 Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/493250/100/0/threaded
http://www.securityfocus.com/bid/29578 Patch Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-162B.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2008/1780 Broken Link
http://www.zerodayinitiative.com/advisories/ZDI-08-040/ Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*
cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
cpe:2.3:a:microsoft:directx:10.0:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
OR cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:44

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=121380194923597&w=2 - Mailing List () http://marc.info/?l=bugtraq&m=121380194923597&w=2 - Mailing List
References () http://secunia.com/advisories/30579 - Patch, Vendor Advisory () http://secunia.com/advisories/30579 - Patch, Vendor Advisory
References () http://securityreason.com/securityalert/3937 - Third Party Advisory () http://securityreason.com/securityalert/3937 - Third Party Advisory
References () http://securitytracker.com/id?1020223 - Third Party Advisory, VDB Entry () http://securitytracker.com/id?1020223 - Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/archive/1/493250/100/0/threaded - () http://www.securityfocus.com/archive/1/493250/100/0/threaded -
References () http://www.securityfocus.com/bid/29578 - Patch, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/29578 - Patch, Third Party Advisory, VDB Entry
References () http://www.us-cert.gov/cas/techalerts/TA08-162B.html - Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA08-162B.html - Third Party Advisory, US Government Resource
References () http://www.vupen.com/english/advisories/2008/1780 - Broken Link () http://www.vupen.com/english/advisories/2008/1780 - Broken Link
References () http://www.zerodayinitiative.com/advisories/ZDI-08-040/ - Third Party Advisory, VDB Entry () http://www.zerodayinitiative.com/advisories/ZDI-08-040/ - Third Party Advisory, VDB Entry
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5562 -

Information

Published : 2008-06-12 02:32

Updated : 2024-11-21 00:44


NVD link : CVE-2008-1444

Mitre link : CVE-2008-1444

CVE.ORG link : CVE-2008-1444


JSON object : View

Products Affected

microsoft

  • windows_vista
  • windows_xp
  • windows-nt
  • windows_2000
  • windows_2003_server
  • directx
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer