Errors when handling SAMI files within DirectX (DirectShow) can lead to arbitrary remote code execution. This vulnerability was patched by MS07-064, but now detailed exploit code has been made available for use.

Description:

A DirectShow vulnerability patched by Microsoft in mid-December (MS07-064) has now had detailed exploit code released and made readily available from a number of sources.

Mitigation:

If users have not already applied the MS07-064 patch to their Windows 2000 systems, it is considered essential that the patch is applied as soon as possible

Updates:

http://www.microsoft.com/technet/security/bulletin/ms07-064.mspx

Source:

http://milw0rm.com/exploits/4866

Exploits:

http://milw0rm.com/exploits/4866

CVE-ID: CVE-2007-3901