main

Security Fix for DirectX 8 on 98/ME/W2K

Daniel Fleshbourne   on 23 September 2005 - 12:19 · 6 comments & 925 views

Advertisement (Why?)
DirectX consists of a set of low-level Application Programming Interfaces (APIs) used by Windows programs for multimedia support. Within DirectX, the DirectShow technology performs client-side audio and video sourcing, manipulation and rendering. There are two buffer overruns with identical effects in the function used by DirectShow to check parameters in a Musical Instrument Digital Interface (MIDI) file. A security vulnerability results because it would be possible for a malicious user to attempt to exploit these flaws and execute code in the security context of the logged on user.

An attacker could seek to exploit this vulnerability by creating a specially crafted MIDI file designed to exploit this vulnerability and then host it on a Web site or on a network share, or send it via an HTML email. In the case where the file was hosted on a web site or network share, the user would need to open the specially crafted file. If the file was embedded in a page, the vulnerability could be exploited when a user visited the Web page. In the HTML E-mail case, the vulnerability could be exploited when a user opened or previewed the HTML e-mail. A successful attack could have the effect of either causing DirectShow, or an application making use of DirectShow, to fail, or causing an attacker's code to run on the user's computer in the security context of the user.

Download: Security Fix for DirectX 8 on 98/ME/W2K (KB819696)
View: Knowledge Base Article


Key Features:

You can open frequently used applications and documents from the keyboard, without having to memorize a multitude of hotkeys or keystrokes.
You can use hotkeys to launch an application or group of programs, documents, and folders.
You can slam the mouse up to the top of the screen, without regard to how high you slam it, and use middle mouse button to call up this app.

Post a comment · Send to friend Comments · There are 6 additional comments
#1 Gowcra on 23 Sep 2005 - 12:23
YAY! good news to hear!
#2 Ravensworth on 23 Sep 2005 - 17:11
Why would anyone still be using DirectX 8?
(1 reply) #3 Kushan on 23 Sep 2005 - 18:01
Why would you need to release a security fix for DX8? Why not just upgrade to DX9...
#3.1 Echelon Left on 23 Sep 2005 - 19:43
Becasue some people are ignorant noobs, that's why.
#4 netizen on 24 Sep 2005 - 00:29
Installing DX9 might break compatability with much older video chipsets. An old machine of mine will lose all 3D accelleration if I put DX8 on it, so I leave it with 7 and it does the job I want it to. Bizzarre that Microsoft would spend time on a fix for this though?
#5 Zero on 24 Sep 2005 - 23:22
Article ID : 819696
Last Review : December 21, 2004
Revision : 8.2


Old news is so exciting!

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)