THREAT OPS › CVEs › CVE-2009-1537
CVE-2009-1537 — Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.
Vulnerability details
- Affected productsDirectX
- KEV remediation due2026-06-03