DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056

[Andres Gomez Ramirez <andres.gomez@xxxxxxx>]

Introduction:

The Microsoft DirectShow application programming interface (API) is a 
media-streaming architecture for Microsoft Windows. Using DirectShow, your 
applications can perform high-quality video and audio playback or capture.  

Overview:

DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, 
Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 
8, and Windows Server 2012 allows remote attackers to execute arbitrary code 
via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite 
Vulnerability." 

References:

    * 
http://kuronosec.blogspot.de/2013/07/directshow-arbitrary-memory-overwrite.html
    * https://technet.microsoft.com/en-us/security/bulletin/ms13-056 
    * http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3174

Fix:

http://technet.microsoft.com/en-us/security/bulletin/ms13-056