Name of the Vulnerable Software and Affected Versions:
Microsoft DirectX versions 7.0 through 9.0c
Description:
The issue allows remote attackers to execute arbitrary code via a crafted QuickTime media file. This has been exploited in the wild.
Recommendations:
For Microsoft DirectX versions 7.0 through 9.0c, update to a version that is not affected by this issue to prevent remote attackers from executing arbitrary code.