Published: 12/12/2007 Updated: 30/04/2019

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 860

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Subscribe to Windows 2003 Server

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 up to and including 10.0 allows remote malicious users to execute arbitrary code via a crafted SAMI file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft directx 5.2
microsoft directx 6.1
microsoft directx 8.1b
microsoft directx 8.2
microsoft directx 10.0
microsoft directx 8.1
microsoft directx 8.1a
microsoft directx 7.1
microsoft directx 8.0
microsoft directx 8.0a
microsoft directx 9.0c
microsoft directx 7.0
microsoft directx 7.0a
microsoft directx 9.0a
microsoft directx 9.0b

Microsoft DirectX SAMI file parsing remote stack overflow exploit that binds a shell to port 4444 ...

#!/usr/bin/python ########################################################################## # Bug discovered by Jun Mao of VeriSign iDefense # wwwsecurityfocuscom/bid/26789 # CVE-2007-3901 # Coded by Matteo Memelli aka ryujin # wwwgray-worldnet wwwbe4mindcom # Tested on: Windows 2000 SP4 English, DirectX 70 (4070007 ...

## # $Id: ms07_064_samirb 10550 2010-10-05 01:05:49Z mc $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## class Metasploit3 < Msf::Ex ...

CWE-119 http://secunia.com/advisories/28010 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632 http://www.securityfocus.com/bid/26789 http://www.securitytracker.com/id?1019073 http://www.iss.net/threats/280.html http://www.us-cert.gov/cas/techalerts/TA07-345A.html http://www.kb.cert.org/vuls/id/804089 http://www.vupen.com/english/advisories/2007/4180 https://exchange.xforce.ibmcloud.com/vulnerabilities/38721 https://www.exploit-db.com/exploits/4866 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 http://www.securityfocus.com/archive/1/485268/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/62428/sami-overflow.txt.html https://www.exploit-db.com/exploits/4866/https://www.kb.cert.org/vuls/id/804089

CVE-2007-3901

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect