CVE-2007-3895: Microsoft DirectX

High severity, CVSS 9.3. EPSS: 36.2% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.

Affected products

• Microsoft DirectX: version 7.0 only; version 8.1 only; version 9.0c only; version 10.0 only

Published 2007-12-12. Last modified 2026-06-16.