Unrated severityNVD Advisory· Published May 29, 2009· Updated Apr 23, 2026
CVE-2009-1537
CVE-2009-1537
Description
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
Affected products
17cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- www.microsoft.com/technet/security/advisory/971778.mspxnvdPatchVendor Advisory
- blogs.technet.com/msrc/archive/2009/05/28/microsoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspxnvdVendor Advisory
- secunia.com/advisories/35268nvdVendor Advisory
- www.vupen.com/english/advisories/2009/1445nvdVendor Advisory
- www.vupen.com/english/advisories/2009/1886nvdVendor Advisory
- www.us-cert.gov/cas/techalerts/TA09-195A.htmlnvdUS Government Resource
- blogs.technet.com/srd/archive/2009/05/28/new-vulnerability-in-quicktime-parsing.aspxnvd
- isc.sans.org/diary.htmlnvd
- osvdb.org/54797nvd
- www.securityfocus.com/bid/35139nvd
- www.securitytracker.com/idnvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6237nvd
News mentions
0No linked articles in our index yet.