Description
Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."
References
- ADV-2008-1780 vdb-entry
- 3937 third-party-advisory
- 1020223 vdb-entry
- MS08-033 vendor-advisory
- 29578 vdb-entry
- oval:org.mitre.oval:def:5562 vdb-entry signature
- TA08-162B third-party-advisory
- HPSBST02344 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-040/
- 30579 third-party-advisory
- 20080610 ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability mailing-list