CVE-2008-1444: Microsoft DirectX

High severity, CVSS 9.3. EPSS: 39.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange (SAMI) file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."

Affected products

• Microsoft DirectX: version 9.0 only; version 10.0 only; version 7.0 only; version 8.1 only

Published 2008-06-12. Last modified 2026-06-16.