[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdJvN0RH0iSYocqogbR90qGWiXECpQyVu456vfPliDDY":3,"g5a-risk:CVE-2009-1537":295},{"success":4,"data":5,"meta":293},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":49,"affectedProducts":50,"affectedProductsCount":96,"references":97,"referencesCount":182,"weaknesses":183,"weaknessesCount":192,"isActivelyExploited":4,"cisaInfo":193,"otxData":27,"relatedBlogPosts":194,"seoMetadata":195,"configurations":220,"relatedVendorCves":277,"notableEvents":278},"CVE-2009-1537","What is CVE-2009-1537?","Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"","Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows...","2009-05-29T18:30:00.187","2026-06-16T23:07:28.827",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":45},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[],[32],{"Source":33,"Type":34,"CVSSData":35,"BaseSeverity":26,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,"",8.6,10,false,[],0.51362,[48,48,48,48,48,48,46],0.51207,"High",[51,56,59,62,65,68,71,74,77,80,84,87,90,93],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"microsoft","directx","7.0","cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"7.0a","cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":60,"criteria":61,"vulnerable":4},"7.1","cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":63,"criteria":64,"vulnerable":4},"8.1","cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":66,"criteria":67,"vulnerable":4},"8.1b","cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":69,"criteria":70,"vulnerable":4},"9.0","cpe:2.3:a:microsoft:directx:9.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":72,"criteria":73,"vulnerable":4},"9.0a","cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":75,"criteria":76,"vulnerable":4},"9.0b","cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":78,"criteria":79,"vulnerable":4},"9.0c","cpe:2.3:a:microsoft:directx:9.0c:*:*:*:*:*:*:*",{"vendor":52,"product":81,"version":82,"criteria":83,"vulnerable":4},"windows_2000","*","cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",{"vendor":52,"product":85,"version":82,"criteria":86,"vulnerable":4},"windows_2003_server","cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*",{"vendor":52,"product":88,"version":82,"criteria":89,"vulnerable":4},"windows_server_2003","cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*",{"vendor":52,"product":91,"version":82,"criteria":92,"vulnerable":4},"windows_xp","cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",{"vendor":52,"product":91,"version":94,"criteria":95,"vulnerable":4},"-","cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*",14,[98,103,106,111,116,120,125,129,133,138,142,145,148,152,154,156,158,160,162,164,166,168,170,172,174,176,178],{"url":99,"source":100,"tags":101},"http:\u002F\u002Fblogs.technet.com\u002Fmsrc\u002Farchive\u002F2009\u002F05\u002F28\u002Fmicrosoft-security-advisory-971778-vulnerability-in-microsoft-directshow-released.aspx","Technet",[102],"Vendor Advisory",{"url":104,"source":100,"tags":105},"http:\u002F\u002Fblogs.technet.com\u002Fsrd\u002Farchive\u002F2009\u002F05\u002F28\u002Fnew-vulnerability-in-quicktime-parsing.aspx",[102],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fisc.sans.org\u002Fdiary.html?storyid=6481","Sans",[110],"Not Applicable",{"url":112,"source":113,"tags":114},"http:\u002F\u002Fosvdb.org\u002F54797","Osvdb",[115],"Broken Link",{"url":117,"source":118,"tags":119},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F35268","Secunia",[102],{"url":121,"source":122,"tags":123},"http:\u002F\u002Fwww.microsoft.com\u002Ftechnet\u002Fsecurity\u002Fadvisory\u002F971778.mspx","Microsoft",[124,102],"Patch",{"url":126,"source":127,"tags":128},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F35139","Securityfocus",[115],{"url":130,"source":131,"tags":132},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1022299","Securitytracker",[115],{"url":134,"source":135,"tags":136},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA09-195A.html","Us-cert",[137],"US Government Resource",{"url":139,"source":140,"tags":141},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1445","Vupen",[102],{"url":143,"source":140,"tags":144},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1886",[102],{"url":146,"source":122,"tags":147},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2009\u002Fms09-028",[102],{"url":149,"source":150,"tags":151},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A6237","Cisecurity",[115],{"url":99,"source":100,"tags":153},[102],{"url":104,"source":100,"tags":155},[102],{"url":107,"source":108,"tags":157},[110],{"url":112,"source":113,"tags":159},[115],{"url":117,"source":118,"tags":161},[102],{"url":121,"source":122,"tags":163},[124,102],{"url":126,"source":127,"tags":165},[115],{"url":130,"source":131,"tags":167},[115],{"url":134,"source":135,"tags":169},[137],{"url":139,"source":140,"tags":171},[102],{"url":143,"source":140,"tags":173},[102],{"url":146,"source":122,"tags":175},[102],{"url":149,"source":150,"tags":177},[115],{"url":179,"source":180,"tags":181},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1537","CISA",[137],27,[184],{"id":185,"name":186,"description":187,"extendedDescription":188,"status":189,"abstraction":190,"structure":191},"CWE-158","Improper Neutralization of Null Byte or NUL Character","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.","As data is parsed, an injected NUL character or null byte may cause the product to believe the input is terminated earlier than it actually is, or otherwise cause the input to be misinterpreted. This could then be used to inject potentially dangerous input that occurs after the null byte or otherwise bypass validation routines and other protection mechanisms.","Incomplete","Variant","Simple",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":27},[],{"title":196,"metaDescription":197,"keywords":198,"canonicalUrl":199,"structuredData":200},"What is CVE-2009-1537? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-1537, a high severity cyber security vulnerability from 2009. High exploit probability (51.4%). Unspecified vulnerability ...","CVE-2009-1537, CVE-2009-1537 vulnerability, CVE-2009-1537 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, microsoft security, directx vulnerability, windows_2000 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2009-1537",{"@context":201,"@type":202,"headline":196,"description":197,"datePublished":10,"dateModified":11,"author":203,"publisher":207,"about":211,"mainEntityOfPage":215,"articleSection":218,"keywords":219},"https:\u002F\u002Fschema.org","TechArticle",{"@type":204,"name":205,"url":206},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":204,"name":205,"url":206,"logo":208},{"@type":209,"url":210},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":212,"name":6,"description":213,"additionalType":214},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":216,"@id":217},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-1537","Cybersecurity","CVE-2009-1537, CVE-2009-1537 vulnerability, CVE-2009-1537 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[221,249],{"Operator":222,"Negate":27,"Nodes":223},"AND",[224,245],{"Operator":225,"Negate":44,"CPEMatch":226},"OR",[227,229,231,233,235,237,239,241,243],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":228,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"459D411C-4994-41DB-9594-F460EADA3351",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":232,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4F01F75D-4C20-4DA2-BD3B-4A3BD466F773",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":234,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8FF0278F-AFA7-48BA-8762-5569EC174AEE",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1BBFBDA6-90F5-4A8A-BD47-2DCA5CA8D5AA",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2936E9C2-65E6-4D26-A277-FF2AE13A3FEC",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B2F096A3-DD19-4D54-94F4-027DBDF1A705",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"70A8E96E-F752-43D2-83C3-877DE1042B80",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":244,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"44C68B75-2B7A-450B-BA1B-03E77E03B59B",{"Operator":225,"Negate":44,"CPEMatch":246},[247],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF",{"Operator":222,"Negate":27,"Nodes":250},[251,257],{"Operator":225,"Negate":44,"CPEMatch":252},[253,254,255,256],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":244,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Operator":225,"Negate":44,"CPEMatch":258},[259,260,262,265,268,270,272,275],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":261,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2978BF86-5A1A-438E-B81F-F360D0E30C9C",{"Vulnerable":4,"Criteria":263,"MatchCriteriaID":264,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*","F7EFB032-47F4-4497-B16B-CB9126EAC9DF",{"Vulnerable":4,"Criteria":266,"MatchCriteriaID":267,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*","6881476D-81A2-4DFD-AC77-82A8D08A0568",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":269,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4D3B5E4F-56A6-4696-BBB4-19DF3613D020",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":271,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9B339C33-8896-4896-88FF-88E74FDBC543",{"Vulnerable":4,"Criteria":273,"MatchCriteriaID":274,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*","CE477A73-4EE4-41E9-8694-5A3D5DC88656",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":276,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C6109348-BC79-4ED3-8D41-EA546A540C79",[],[279,286],{"id":280,"eventType":281,"eventTime":282,"details":283,"label":284,"color":285},"58453ba0-1d9d-4211-b474-858802ef84a8","NEW_CISA","2026-05-22T08:54:31.794872+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":287,"eventType":288,"eventTime":289,"details":290,"label":291,"color":292},"931b71c0-c824-4d3d-9623-2aa28a649307","LOW_EPSS_DELTA","2026-05-23T04:08:32.627155+00:00","Daily EPSS score decreased by 0.186 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":294,"version":36},1792250270070,{"score":296,"band":49,"action":297,"scoredAt":298},74,"Emergency patch","2026-10-17T06:36:41.6041+00:00"]