CVE-2009-1537

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — DirectX

Date Added 2026-05-20

Remediation Due 2026-06-03

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 ; https://nvd.nist.gov/vuln/detail/CVE-2009-1537

Weakness Classification (1)

CWE-158

Affected Software (22)

Vendor	Product	Version
microsoft	directx	7.0
microsoft	directx	7.0a
microsoft	directx	7.1
microsoft	directx	8.1
microsoft	directx	8.1b
microsoft	directx	9.0
microsoft	directx	9.0a
microsoft	directx	9.0b
microsoft	directx	9.0c
microsoft	directx	9.0
microsoft	directx	9.0a
microsoft	directx	9.0b
microsoft	directx	9.0c
microsoft	windows_2000	*
microsoft	windows_2000	*
microsoft	windows_2003_server	*
microsoft	windows_2003_server	*
microsoft	windows_2003_server	*
microsoft	windows_server_2003	*
microsoft	windows_xp	*
microsoft	windows_xp	*
microsoft	windows_xp	-