CVE-2007-4336

Microsoft DirectX Media 6.0 - Buffer Overflow

Title source: llm

Description

Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.

Exploits (1)

exploitdb WORKING POC VERIFIED

by h07 · htmlremotewindows

https://www.exploit-db.com/exploits/4279

View Code ZIP pw:eip

References (8)

[Vendor Advisory] http://secunia.com/advisories/26426

[US Government Resource] http://www.kb.cert.org/vuls/id/466601

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25279

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018551

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35970

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4279

[Third Party Advisory, VDB Entry] http://osvdb.org/36399

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2857

Scores

EPSS 0.7655

EPSS Percentile 98.9%

Details

Status published

Products (1)

microsoft/directx_media 6.0

Published Aug 14, 2007

Tracked Since Feb 18, 2026