CVE-2009-0084

no score yetEPSS 32%

microsoft directx: no CVSS score yet. EPSS 32% chance of exploitation in the next 30 days.

Use-after-free vulnerability in DirectShow in Microsoft DirectX 8.1 and 9.0 allows remote attackers to execute arbitrary code via an MJPEG file or video stream with a malformed Huffman table, which triggers an exception that frees heap memory that is later accessed, aka "MJPEG Decompression Vulnerability."

EPSS: 32% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2009-04-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:directx

References

http://osvdb.org/53632
http://secunia.com/advisories/34665
http://support.avaya.com/elmodocs2/security/ASA-2009-132.htm
http://www.piotrbania.com/all/adv/ms-directx-mjpeg-adv.txt
http://www.securityfocus.com/bid/34460

Check your stack JSON