CVE-2007-3901: Microsoft DirectX

High severity, CVSS 8.5. EPSS: 45.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.

Affected products

• Microsoft DirectX: version 5.2 only; version 6.1 only; version 7.0 only; version 7.0a only; version 7.1 only; version 8.0 only; …

Published 2007-12-12. Last modified 2026-06-16.