Introduction:
The Microsoft DirectShow application programming interface (API) is a media=
-streaming architecture for Microsoft Windows. Using DirectShow, your appli=
cations can perform high-quality video and audio playback or capture. =20
Overview:
DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wi=
ndows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows=
8, and Windows Server 2012 allows remote attackers to execute arbitrary co=
de via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulne=
rability."=20
References:
* http://kuronosec.blogspot.de/2013/07/directshow-arbitrary-memory-over=
write.html
* https://technet.microsoft.com/en-us/security/bulletin/ms13-056=20
* http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2013-3174
Fix:
http://technet.microsoft.com/en-us/security/bulletin/ms13-056=