This host is installed with Microsoft DirectShow and is prone to remote code execution vulnerability. This NVT has been replaced by NVT secpod_ms09-028.nasl (OID:1.3.6.1.4.1.25623.1.0.900588).

Attacker who successfully exploit this flaw could take complete control of an affected system. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/MS09-028.mspx Workaround: Apply workaround steps mentioned in the reference link.

Microsoft DirectShow fails to handle supported QuickTime format files. This could allow code execution if a user opened a specially crafted QuickTime media file when a user is logged on with administrative user rights.

DirectX 7.0 8.1 and 9.0* on Microsoft Windows 2K DirectX 9.0 on Microsoft Windows XP and 2K3

• http://www.microsoft.com/technet/security/advisory/971778.mspx

---

Updated on 2015-03-25