Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
References
Configurations
Configuration 1 (hide)
|
History
07 Dec 2023, 18:38
Type | Values Removed | Values Added |
---|---|---|
CPE |
Information
Published : 2013-02-13 12:04
Updated : 2024-02-04 18:16
NVD link : CVE-2013-0077
Mitre link : CVE-2013-0077
CVE.ORG link : CVE-2013-0077
JSON object : View
Products Affected
microsoft
- windows_vista
- windows_xp
- windows_server_2008
- windows_server_2003
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')