Vulnerability Analysis
CVE-2009-1537
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka "DirectX NULL Byte Overwrite Vulnerability."
CISA KEV
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
Temporal Score:-
EPSS:50.93%
Threat Intelligence Signals
CISA KEV
YES
KEV Date Added
2026-05-20
Ransomware Use
Unknown
KEV Due Date
2026-06-03
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
50.926%
EPSS Percentile
98.8th pct
GHSA ID
GitHub Severity
HIGH
SSVC Exploitation
—
SSVC Automatable
—
Vulnerability Class
—
Identity & Timeline
| Status | - |
| Assigning Authority | - |
| CVSS Version / Source | - |
| Reserved | - |
| Published | - |
| Patch Date (date_public) | - |
| Exploit DB Date | - |
| First GitHub PoC Date | - |
| Last Updated | - |
| Time to Patch (Days to fix) | - |
| Exploit Release Gap | - |
| PoC Release Gap | - |
| Exploit DB References | None identified |
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| No affected products specified. | ||
Social Buzz