Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS08-033: Vulnerabilities in DirectX could allow remote code execution


View products that this article applies to.

Introduction

Microsoft has released security bulletin MS08-033. The security bulletin contains all the relevant information about the security update. This information includes deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top


Known issues with this security update

  • After you install this security update, you may find that the preview from a Web camera (Webcam) stops unexpectedly. The preview stops when the system encounters a bad MJPEG frame. A bad MJPEG frame can be caused by random electrical noise or by some other hardware event.

    To work around this issue, stop and then restart the preview. If the problem continues to frequently occur, try to connect the camera directly to a USB port on the computer. For example, do not connect the camera to an external USB hub. Also, verify that any cables that are connected to the computer are in good working condition. For example, inferior or damaged cables may be more susceptible to receiving electrical noise.
  • After you install this update on a computer that is running Microsoft Windows 2000, you may experience one or both of the following issues:
    • You scan a system by using Microsoft Baseline Security Analyzer (MBSA) 2.1 or by using a Microsoft Windows Server Update Services (WSUS) server. When you do this, the scan report may indicate that this update was successfully installed even though the update was not installed.
    • The reports from MBSA and from WSUS may differ about the status of this security update.
    These issues occur because of a detection issue with this security update.

    The Microsoft catalog that is used by WSUS and by MBSA was updated to resolve this detection issue. Therefore, a current scan correctly identifies the status of this update. If a scan indicates that you have to install security update 951698, we recommend that you install the update.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported editions of Windows 2000 SP4

File nameFile versionFile sizeDateTimePlatform
Quartz.dll6.1.9.734791,82430-Apr-200816:33x86

For all supported editions of Windows 2000 SP4 with DirectX8.1

File nameFile versionFile sizeDateTimePlatform
Quartz.dll6.3.1.8911,665,53602-May-200803:09x86

For all supported editions of Windows 2000 SP4 with DirectX9.0

File nameFile versionFile sizeDateTimePlatform
Quartz.dll6.5.1.9091,222,65601-May-200805:16x86

For all supported Itanium-based editions of Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Ia64_1198f9fd975184b8c1927d9e5201c33b_31bf3856ad364e35_6.0.6001.18063_none_4b970c12f21ee417.manifestNot applicable1,05228-Apr-200819:48Not applicable
Ia64_7218096e539391fefaf91ee111626ce3_31bf3856ad364e35_6.0.6001.22167_none_5833dab4d9dddba6.manifestNot applicable1,05228-Apr-200819:48Not applicable
Ia64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a633fd2cee122833.manifestNot applicable118,18026-Apr-200818:45Not applicable
Ia64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6c19b20072c2d59.manifestNot applicable118,18026-Apr-200809:09Not applicable
Package_1_for_kb951698_bf~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable1,97528-Apr-200819:48Not applicable
Package_1_for_kb951698~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable2,91328-Apr-200819:48Not applicable
Package_for_kb951698_server_0_bf~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable1,41928-Apr-200819:48Not applicable
Package_for_kb951698_server_0~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable1,43828-Apr-200819:48Not applicable
Package_for_kb951698_server_bf~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable1,42428-Apr-200819:48Not applicable
Package_for_kb951698_server~31bf3856ad364e35~ia64~~6.0.1.0.mumNot applicable1,44328-Apr-200819:48Not applicable
Update-bf.mumNot applicable1,41528-Apr-200819:48Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifestNot applicable122,93126-Apr-200809:13Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifestNot applicable122,93126-Apr-200808:58Not applicable
Quartz.dll6.6.6001.180633,864,57626-Apr-200808:46IA-64
Quartz.dll6.6.6001.221673,864,57626-Apr-200808:07IA-64
Quartz.dll6.6.6001.180631,314,81626-Apr-200808:08x86
Quartz.dll6.6.6001.221671,314,81626-Apr-200807:57x86

For all supported x64-based editions of Windows Vista or Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Amd64_08622faa781a67fa6f7e09f45038318a_31bf3856ad364e35_6.0.6000.20823_none_1e2c5f8402f7f4ab.manifestNot applicable1,05428-Apr-200819:48Not applicable
Amd64_45839ae41ba2e635f6fb9b35bee5a9ca_31bf3856ad364e35_6.0.6000.16681_none_808e0dadacb929f5.manifestNot applicable1,05428-Apr-200819:48Not applicable
Amd64_83064f214165954fc36185fcefb4f507_31bf3856ad364e35_6.0.6001.22167_none_9a6312b5d06d3ebe.manifestNot applicable1,05428-Apr-200819:48Not applicable
Amd64_ea83cb643bd325551570b486824fe7aa_31bf3856ad364e35_6.0.6001.18063_none_0f2b22ddccbd7bf0.manifestNot applicable1,05428-Apr-200819:48Not applicable
Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_005315a8a95d04b0.manifestNot applicable120,11726-Apr-200808:40Not applicable
Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_011f9475c2482ca9.manifestNot applicable120,11726-Apr-200808:14Not applicable
Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_0250f4baa671906d.manifestNot applicable120,11726-Apr-200818:32Not applicable
Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_02de92adbf8b9593.manifestNot applicable120,11726-Apr-200818:58Not applicable
Package_1_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable2,14028-Apr-200819:48Not applicable
Package_1_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable3,08428-Apr-200819:48Not applicable
Package_2_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,98028-Apr-200819:48Not applicable
Package_2_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable2,92028-Apr-200819:48Not applicable
Package_3_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,98028-Apr-200819:48Not applicable
Package_3_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable2,92028-Apr-200819:48Not applicable
Package_for_kb951698_client_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,42328-Apr-200819:48Not applicable
Package_for_kb951698_client_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,44228-Apr-200819:48Not applicable
Package_for_kb951698_client_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,36528-Apr-200819:48Not applicable
Package_for_kb951698_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,38428-Apr-200819:48Not applicable
Package_for_kb951698_client_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,69928-Apr-200819:48Not applicable
Package_for_kb951698_client~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,73228-Apr-200819:48Not applicable
Package_for_kb951698_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,42328-Apr-200819:48Not applicable
Package_for_kb951698_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,44228-Apr-200819:48Not applicable
Package_for_kb951698_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,42828-Apr-200819:48Not applicable
Package_for_kb951698_server~31bf3856ad364e35~amd64~~6.0.1.0.mumNot applicable1,44828-Apr-200819:48Not applicable
Update-bf.mumNot applicable2,06828-Apr-200819:48Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a.manifestNot applicable122,93126-Apr-200808:44Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73.manifestNot applicable122,93126-Apr-200808:01Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifestNot applicable122,93126-Apr-200809:13Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifestNot applicable122,93126-Apr-200808:58Not applicable
Quartz.dll6.6.6000.166811,586,68826-Apr-200808:07x64
Quartz.dll6.6.6000.208231,586,68826-Apr-200807:49x64
Quartz.dll6.6.6001.180631,571,32826-Apr-200808:30x64
Quartz.dll6.6.6001.221671,571,32826-Apr-200808:17x64
Quartz.dll6.6.6000.166811,327,10426-Apr-200808:02x86
Quartz.dll6.6.6000.208231,327,61626-Apr-200807:41x86
Quartz.dll6.6.6001.180631,314,81626-Apr-200808:08x86
Quartz.dll6.6.6001.221671,314,81626-Apr-200807:57x86

For all supported 32-bit editions of Windows Vista or Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Package_1_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,91328-Apr-200819:48Not applicable
Package_1_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable2,62628-Apr-200819:48Not applicable
Package_2_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,75528-Apr-200819:48Not applicable
Package_2_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable2,46428-Apr-200819:48Not applicable
Package_3_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,75528-Apr-200819:48Not applicable
Package_3_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable2,46428-Apr-200819:48Not applicable
Package_for_kb951698_client_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,41528-Apr-200819:48Not applicable
Package_for_kb951698_client_0~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,43428-Apr-200819:48Not applicable
Package_for_kb951698_client_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,35728-Apr-200819:48Not applicable
Package_for_kb951698_client_1~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,37628-Apr-200819:48Not applicable
Package_for_kb951698_client_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,68928-Apr-200819:48Not applicable
Package_for_kb951698_client~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,72228-Apr-200819:48Not applicable
Package_for_kb951698_server_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,41528-Apr-200819:48Not applicable
Package_for_kb951698_server_0~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,43428-Apr-200819:48Not applicable
Package_for_kb951698_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,42028-Apr-200819:48Not applicable
Package_for_kb951698_server~31bf3856ad364e35~x86~~6.0.1.0.mumNot applicable1,44028-Apr-200819:48Not applicable
Update-bf.mumNot applicable2,05428-Apr-200819:48Not applicable
X86_5904a9d069af804cb0b0b58d96a05161_31bf3856ad364e35_6.0.6001.18063_none_4e7ce018f1fe727f.manifestNot applicable70328-Apr-200819:48Not applicable
X86_60dd462781a882526a8a8a7969c0faae_31bf3856ad364e35_6.0.6000.20823_none_d3eccee154117654.manifestNot applicable70328-Apr-200819:48Not applicable
X86_68800842b613530caeed30caae398bd3_31bf3856ad364e35_6.0.6000.16681_none_ed3a066e22369c27.manifestNot applicable70328-Apr-200819:48Not applicable
X86_82a53201ba72daadc1b79ba56e810f59_31bf3856ad364e35_6.0.6001.22167_none_05e277b78bb127f0.manifestNot applicable70328-Apr-200819:48Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a.manifestNot applicable122,93126-Apr-200808:44Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73.manifestNot applicable122,93126-Apr-200808:01Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifestNot applicable122,93126-Apr-200809:13Not applicable
X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifestNot applicable122,93126-Apr-200808:58Not applicable
Quartz.dll6.6.6000.166811,327,10426-Apr-200808:02x86
Quartz.dll6.6.6000.208231,327,61626-Apr-200807:41x86
Quartz.dll6.6.6001.180631,314,81626-Apr-200808:08x86
Quartz.dll6.6.6001.221671,314,81626-Apr-200807:57x86

For all supported x64-based editions of Windows Server 2003 or Windows XP Professional

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Quartz.dll6.5.3790.31302,174,97601-May-200800:04x64SP1SP1GDR
Wquartz.dll6.5.3790.31301,291,26401-May-200800:04x86SP1SP1GDR\WOW
Quartz.dll6.5.3790.31302,174,97601-May-200800:04x64SP1SP1QFE
Wquartz.dll6.5.3790.31301,291,26401-May-200800:05x86SP1SP1QFE\WOW
Quartz.dll6.5.3790.42832,175,48801-May-200800:08x64SP2SP2GDR
Wquartz.dll6.5.3790.42831,274,88001-May-200800:08x86SP2SP2GDR\WOW
Quartz.dll6.5.3790.42832,175,48801-May-200800:05x64SP2SP2QFE
Wquartz.dll6.5.3790.42831,274,88001-May-200800:05x86SP2SP2QFE\WOW

For all supported Itanium-based editions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Quartz.dll6.5.3790.31303,982,84801-May-200800:03IA-64SP1SP1GDR
Wquartz.dll6.5.3790.31301,291,26401-May-200800:03x86SP1SP1GDR\WOW
Quartz.dll6.5.3790.31303,982,84801-May-200800:03IA-64SP1SP1QFE
Wquartz.dll6.5.3790.31301,291,26401-May-200800:03x86SP1SP1QFE\WOW
Quartz.dll6.5.3790.42833,982,84801-May-200800:07IA-64SP2SP2GDR
Wquartz.dll6.5.3790.42831,274,88001-May-200800:07x86SP2SP2GDR\WOW
Quartz.dll6.5.3790.42833,983,36001-May-200800:04IA-64SP2SP2QFE
Wquartz.dll6.5.3790.42831,274,88001-May-200800:04x86SP2SP2QFE\WOW

For all supported 32-bit editions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Quartz.dll6.5.3790.31301,291,26430-Apr-200813:57x86SP1SP1GDR
Quartz.dll6.5.3790.31301,291,26430-Apr-200814:01x86SP1SP1QFE
Quartz.dll6.5.3790.42831,274,88030-Apr-200813:36x86SP2SP2GDR
Quartz.dll6.5.3790.42831,274,88030-Apr-200814:17x86SP2SP2QFE

For all supported 32-bit editions of Windows XP

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Quartz.dll6.5.2600.33671,287,68007-May-200805:18x86SP2SP2GDR
Quartz.dll6.5.2600.33671,288,19207-May-200804:55x86SP2SP2QFE
Quartz.dll6.5.2600.55961,288,19207-May-200805:12x86SP3SP3GDR
Quartz.dll6.5.2600.55961,288,19207-May-200805:04x86SP3SP3QFE

↑ Back to the top


Keywords: kbexpertiseinter, kbfix, kbbug, kbsecvulnerability, kbsecbulletin, kbsecurity, kbqfe, kbexpertisebeginner, KB951698

↑ Back to the top

Article Info
Article ID : 951698
Revision : 6
Created on : 5/9/2012
Published on : 5/9/2012
Exists online : False
Views : 522