CVE:CVE-2009-1537
CNNVD:CNNVD-200905-327
Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。
DirectX的DirectShow组件(quartz.dll)在解析畸形的QuickTime媒体文件时存在错误，用户受骗打开了恶意的媒体文件就会导致执行任意代码。由于用户可能在浏览器中安装媒体播放插件，因此访问恶意网页就足以导致播放QuickTime文件，触发Quartz.dll中的漏洞。
solution:Upgrade microsoft directx to a higher version than 7.0,7.0a,7.1,8.1,8.1b,9.0,9.0a,9.0b,9.0c,and avoid the version 7.0,7.0a,7.1,8.1,8.1b,9.0,9.0a,9.0b,9.0c; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3