Description
Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."
References
- TA09-104A third-party-advisory
- 53632 vdb-entry
- 34665 third-party-advisory
- 1022040 vdb-entry
- ADV-2009-1025 vdb-entry
- oval:org.mitre.oval:def:5618 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm
- 34460 vdb-entry
- MS09-011 vendor-advisory
- http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt