CVE-2007-3901

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.

CVSS v2.0

8.5 HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

45.87% chance of exploitation in the next 30 days, 99th percentile

Published

2007-12-12

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ms07_064_sami.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16442
• https://www.exploit-db.com/exploits/4866

References

• CVE Record
• NVD entry

Related

• CVE-2007-3898
• CVE-2007-3909
• CVE-2007-3896
• CVE-2007-3913
• CVE-2007-3889
• CVE-2007-3925