VulnerabilityModified

CVE-2008-0011

Microsoft DirectX 8.1 through 9.0c, and DirectX on Microsoft XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, does not properly perform MJPEG error checking, which allows remote attackers to execute arbitrary code via a…

HIGH 9.3EPSS 31.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 31.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS: 31.59% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: microsoft/directx
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=121380194923597&w=2Mailing List
http://secunia.com/advisories/30579Patch, Vendor Advisory
http://securitytracker.com/id?1020222Patch
http://www.securityfocus.com/bid/29581Patch
http://www.us-cert.gov/cas/techalerts/TA08-162B.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2008/1780Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236
http://marc.info/?l=bugtraq&m=121380194923597&w=2Mailing List
http://secunia.com/advisories/30579Patch, Vendor Advisory
http://securitytracker.com/id?1020222Patch
http://www.securityfocus.com/bid/29581Patch
http://www.us-cert.gov/cas/techalerts/TA08-162B.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2008/1780Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5236

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.