← Database

CVE-2009-0084

CRITICAL CVSS: 9.3 Published: 2009-04-15 Modified: 2026-06-16

Description

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."

Affected Platforms

Microsoft Windows Server 2003Microsoft Windows 2000Microsoft Windows XpMicrosoft Directx

Weakness Type

CWE-94

References