MS08-033: Vulnerabilities in DirectX could allow remote code execution Article ID : 951698 Last Review : August 12, 2008 Revision : 2.0
On This Page INTRODUCTION Microsoft has released security bulletin MS08-033. The
security bulletin contains all the relevant information about the security
update. This information includes deployment options. To view the complete
security bulletin, visit one of the following Microsoft Web sites:
• Home users:Skip the details : Download the updates for your home computer or laptop from the
Microsoft Update Web site now: • IT professionals:
Back to the top
How to obtain help and support for this security update For home users, no-charge support is available by calling
1-866-PCSAFETY in the United States and Canada or by contacting your local
Microsoft subsidiary. For more information about how to contact your local
Microsoft subsidiary for support issues with security updates, visit the
Microsoft International Support Web site:
North American customers can also obtain instant access to
unlimited no-charge e-mail support or to unlimited individual chat support by
visiting the following Microsoft Web site:
For enterprise customers, support for security updates is
available through your usual support contacts.
Back to the top
Known issues with this security update
After you install this update on a computer that is running Microsoft Windows 2000, you may experience one or both of the following issues:
• You scan a system by using Microsoft Baseline Security Analyzer (MBSA) 2.1 or by using a Microsoft Windows Server Update Services (WSUS) server. When you do this, the scan report may indicate that this update was successfully installed even though the update was not installed. • The reports from MBSA and from WSUS may differ about the status of this security update.
These issues occur because of a detection issue with this security update.
The Microsoft catalog that is used by WSUS and by MBSA was updated to resolve this detection issue. Therefore, a current scan correctly identifies the status of this update. If a scan indicates that you have to install security update 951698, we recommend that you install the update.
Back to the top
File information The English (United States) version of this security update
has the file attributes (or later file attributes) that are listed in the
following table. The dates and times for these files are listed in Coordinated
Universal Time (UTC). When you view the file information, it is converted to
local time. To find the difference between UTC and local time, use the
Time Zone tab in the
Date and Time item in
Control Panel.
For all supported editions of Windows 2000 SP4 File name File version File
size Date Time Platform Quartz.dll 6.1.9.734 791,824 30-Apr-2008 16:33 x86
For all supported editions of Windows 2000 SP4 with DirectX8.1 File name File version File
size Date Time Platform Quartz.dll 6.3.1.891 1,665,536 02-May-2008 03:09 x86
For all supported editions of Windows 2000 SP4 with DirectX9.0 File name File version File
size Date Time Platform Quartz.dll 6.5.1.909 1,222,656 01-May-2008 05:16 x86
For all supported Itanium-based editions of Windows Server 2008 File name File version File
size Date Time Platform Ia64_1198f9fd975184b8c1927d9e5201c33b_31bf3856ad364e35_6.0.6001.18063_none_4b970c12f21ee417.manifest Not
applicable 1,052 28-Apr-2008 19:48 Not
applicable Ia64_7218096e539391fefaf91ee111626ce3_31bf3856ad364e35_6.0.6001.22167_none_5833dab4d9dddba6.manifest Not
applicable 1,052 28-Apr-2008 19:48 Not
applicable Ia64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a633fd2cee122833.manifest Not
applicable 118,180 26-Apr-2008 18:45 Not
applicable Ia64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6c19b20072c2d59.manifest Not
applicable 118,180 26-Apr-2008 09:09 Not
applicable Package_1_for_kb951698_bf~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 1,975 28-Apr-2008 19:48 Not
applicable Package_1_for_kb951698~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 2,913 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0_bf~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 1,419 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 1,438 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_bf~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 1,424 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server~31bf3856ad364e35~ia64~~6.0.1.0.mum Not
applicable 1,443 28-Apr-2008 19:48 Not
applicable Update-bf.mum Not
applicable 1,415 28-Apr-2008 19:48 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifest Not
applicable 122,931 26-Apr-2008 09:13 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifest Not
applicable 122,931 26-Apr-2008 08:58 Not
applicable Quartz.dll 6.6.6001.18063 3,864,576 26-Apr-2008 08:46 IA-64 Quartz.dll 6.6.6001.22167 3,864,576 26-Apr-2008 08:07 IA-64 Quartz.dll 6.6.6001.18063 1,314,816 26-Apr-2008 08:08 x86 Quartz.dll 6.6.6001.22167 1,314,816 26-Apr-2008 07:57 x86
For all supported x64-based editions of Windows Vista or Windows Server 2008 File name File version File
size Date Time Platform Amd64_08622faa781a67fa6f7e09f45038318a_31bf3856ad364e35_6.0.6000.20823_none_1e2c5f8402f7f4ab.manifest Not
applicable 1,054 28-Apr-2008 19:48 Not
applicable Amd64_45839ae41ba2e635f6fb9b35bee5a9ca_31bf3856ad364e35_6.0.6000.16681_none_808e0dadacb929f5.manifest Not
applicable 1,054 28-Apr-2008 19:48 Not
applicable Amd64_83064f214165954fc36185fcefb4f507_31bf3856ad364e35_6.0.6001.22167_none_9a6312b5d06d3ebe.manifest Not
applicable 1,054 28-Apr-2008 19:48 Not
applicable Amd64_ea83cb643bd325551570b486824fe7aa_31bf3856ad364e35_6.0.6001.18063_none_0f2b22ddccbd7bf0.manifest Not
applicable 1,054 28-Apr-2008 19:48 Not
applicable Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_005315a8a95d04b0.manifest Not
applicable 120,117 26-Apr-2008 08:40 Not
applicable Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_011f9475c2482ca9.manifest Not
applicable 120,117 26-Apr-2008 08:14 Not
applicable Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_0250f4baa671906d.manifest Not
applicable 120,117 26-Apr-2008 18:32 Not
applicable Amd64_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_02de92adbf8b9593.manifest Not
applicable 120,117 26-Apr-2008 18:58 Not
applicable Package_1_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 2,140 28-Apr-2008 19:48 Not
applicable Package_1_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 3,084 28-Apr-2008 19:48 Not
applicable Package_2_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,980 28-Apr-2008 19:48 Not
applicable Package_2_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 2,920 28-Apr-2008 19:48 Not
applicable Package_3_for_kb951698_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,980 28-Apr-2008 19:48 Not
applicable Package_3_for_kb951698~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 2,920 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,423 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_0~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,442 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_1_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,365 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,384 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,699 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,732 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,423 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,442 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,428 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server~31bf3856ad364e35~amd64~~6.0.1.0.mum Not
applicable 1,448 28-Apr-2008 19:48 Not
applicable Update-bf.mum Not
applicable 2,068 28-Apr-2008 19:48 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a.manifest Not
applicable 122,931 26-Apr-2008 08:44 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73.manifest Not
applicable 122,931 26-Apr-2008 08:01 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifest Not
applicable 122,931 26-Apr-2008 09:13 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifest Not
applicable 122,931 26-Apr-2008 08:58 Not
applicable Quartz.dll 6.6.6000.16681 1,586,688 26-Apr-2008 08:07 x64 Quartz.dll 6.6.6000.20823 1,586,688 26-Apr-2008 07:49 x64 Quartz.dll 6.6.6001.18063 1,571,328 26-Apr-2008 08:30 x64 Quartz.dll 6.6.6001.22167 1,571,328 26-Apr-2008 08:17 x64 Quartz.dll 6.6.6000.16681 1,327,104 26-Apr-2008 08:02 x86 Quartz.dll 6.6.6000.20823 1,327,616 26-Apr-2008 07:41 x86 Quartz.dll 6.6.6001.18063 1,314,816 26-Apr-2008 08:08 x86 Quartz.dll 6.6.6001.22167 1,314,816 26-Apr-2008 07:57 x86
For all supported 32-bit editions of Windows Vista or Windows Server 2008 File name File version File
size Date Time Platform Package_1_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,913 28-Apr-2008 19:48 Not
applicable Package_1_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 2,626 28-Apr-2008 19:48 Not
applicable Package_2_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,755 28-Apr-2008 19:48 Not
applicable Package_2_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 2,464 28-Apr-2008 19:48 Not
applicable Package_3_for_kb951698_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,755 28-Apr-2008 19:48 Not
applicable Package_3_for_kb951698~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 2,464 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,415 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_0~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,434 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,357 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,376 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,689 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_client~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,722 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,415 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,434 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,420 28-Apr-2008 19:48 Not
applicable Package_for_kb951698_server~31bf3856ad364e35~x86~~6.0.1.0.mum Not
applicable 1,440 28-Apr-2008 19:48 Not
applicable Update-bf.mum Not
applicable 2,054 28-Apr-2008 19:48 Not
applicable X86_5904a9d069af804cb0b0b58d96a05161_31bf3856ad364e35_6.0.6001.18063_none_4e7ce018f1fe727f.manifest Not
applicable 703 28-Apr-2008 19:48 Not
applicable X86_60dd462781a882526a8a8a7969c0faae_31bf3856ad364e35_6.0.6000.20823_none_d3eccee154117654.manifest Not
applicable 703 28-Apr-2008 19:48 Not
applicable X86_68800842b613530caeed30caae398bd3_31bf3856ad364e35_6.0.6000.16681_none_ed3a066e22369c27.manifest Not
applicable 703 28-Apr-2008 19:48 Not
applicable X86_82a53201ba72daadc1b79ba56e810f59_31bf3856ad364e35_6.0.6001.22167_none_05e277b78bb127f0.manifest Not
applicable 703 28-Apr-2008 19:48 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.16681_none_a4347a24f0ff937a.manifest Not
applicable 122,931 26-Apr-2008 08:44 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6000.20823_none_a500f8f209eabb73.manifest Not
applicable 122,931 26-Apr-2008 08:01 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18063_none_a6325936ee141f37.manifest Not
applicable 122,931 26-Apr-2008 09:13 Not
applicable X86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22167_none_a6bff72a072e245d.manifest Not
applicable 122,931 26-Apr-2008 08:58 Not
applicable Quartz.dll 6.6.6000.16681 1,327,104 26-Apr-2008 08:02 x86 Quartz.dll 6.6.6000.20823 1,327,616 26-Apr-2008 07:41 x86 Quartz.dll 6.6.6001.18063 1,314,816 26-Apr-2008 08:08 x86 Quartz.dll 6.6.6001.22167 1,314,816 26-Apr-2008 07:57 x86
For all supported x64-based editions of Windows Server 2003 or Windows XP Professional File name File version File
size Date Time Platform SP
requirement Service branch Quartz.dll 6.5.3790.3130 2,174,976 01-May-2008 00:04 x64 SP1 SP1GDR Wquartz.dll 6.5.3790.3130 1,291,264 01-May-2008 00:04 x86 SP1 SP1GDR\WOW Quartz.dll 6.5.3790.3130 2,174,976 01-May-2008 00:04 x64 SP1 SP1QFE Wquartz.dll 6.5.3790.3130 1,291,264 01-May-2008 00:05 x86 SP1 SP1QFE\WOW Quartz.dll 6.5.3790.4283 2,175,488 01-May-2008 00:08 x64 SP2 SP2GDR Wquartz.dll 6.5.3790.4283 1,274,880 01-May-2008 00:08 x86 SP2 SP2GDR\WOW Quartz.dll 6.5.3790.4283 2,175,488 01-May-2008 00:05 x64 SP2 SP2QFE Wquartz.dll 6.5.3790.4283 1,274,880 01-May-2008 00:05 x86 SP2 SP2QFE\WOW
For all supported Itanium-based editions of Windows Server 2003 File name File version File
size Date Time Platform SP
requirement Service branch Quartz.dll 6.5.3790.3130 3,982,848 01-May-2008 00:03 IA-64 SP1 SP1GDR Wquartz.dll 6.5.3790.3130 1,291,264 01-May-2008 00:03 x86 SP1 SP1GDR\WOW Quartz.dll 6.5.3790.3130 3,982,848 01-May-2008 00:03 IA-64 SP1 SP1QFE Wquartz.dll 6.5.3790.3130 1,291,264 01-May-2008 00:03 x86 SP1 SP1QFE\WOW Quartz.dll 6.5.3790.4283 3,982,848 01-May-2008 00:07 IA-64 SP2 SP2GDR Wquartz.dll 6.5.3790.4283 1,274,880 01-May-2008 00:07 x86 SP2 SP2GDR\WOW Quartz.dll 6.5.3790.4283 3,983,360 01-May-2008 00:04 IA-64 SP2 SP2QFE Wquartz.dll 6.5.3790.4283 1,274,880 01-May-2008 00:04 x86 SP2 SP2QFE\WOW
For all supported 32-bit editions of Windows Server 2003 File name File version File
size Date Time Platform SP
requirement Service branch Quartz.dll 6.5.3790.3130 1,291,264 30-Apr-2008 13:57 x86 SP1 SP1GDR Quartz.dll 6.5.3790.3130 1,291,264 30-Apr-2008 14:01 x86 SP1 SP1QFE Quartz.dll 6.5.3790.4283 1,274,880 30-Apr-2008 13:36 x86 SP2 SP2GDR Quartz.dll 6.5.3790.4283 1,274,880 30-Apr-2008 14:17 x86 SP2 SP2QFE
For all supported 32-bit editions of Windows XP File name File version File
size Date Time Platform SP
requirement Service branch Quartz.dll 6.5.2600.3367 1,287,680 07-May-2008 05:18 x86 SP2 SP2GDR Quartz.dll 6.5.2600.3367 1,288,192 07-May-2008 04:55 x86 SP2 SP2QFE Quartz.dll 6.5.2600.5596 1,288,192 07-May-2008 05:12 x86 SP3 SP3GDR Quartz.dll 6.5.2600.5596 1,288,192 07-May-2008 05:04 x86 SP3 SP3QFE
Back to the top
APPLIES TO • Microsoft Windows Server 2003, Standard x64 Edition • Microsoft Windows Server 2003, Enterprise x64 Edition • Microsoft Windows Server 2003, Datacenter x64 Edition • Microsoft Windows Server 2003 Service Pack 1, when used with: Microsoft Windows Server 2003, Standard Edition (32-bit x86) Microsoft Windows Server 2003, Enterprise Edition (32-bit x86) Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Datacenter Edition (32-bit x86) Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
• Microsoft Windows Server 2003 Service Pack 2, when used with: Microsoft Windows Server 2003, Standard Edition (32-bit x86) Microsoft Windows Server 2003, Enterprise Edition (32-bit x86) Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Datacenter Edition (32-bit x86) Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
• Microsoft Windows 2000 Server SP4, when used with: Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Server Microsoft Windows 2000 Professional Edition
• Microsoft Small Business Server 2000 Standard Edition • Microsoft Windows XP Media Center Edition 2005 • Microsoft Windows XP Professional x64 Edition • Microsoft Windows XP Service Pack 3, when used with: Microsoft Windows XP Home Edition Microsoft Windows XP Professional
• Microsoft Windows XP Service Pack 2, when used with: Microsoft Windows XP Home Edition Microsoft Windows XP Professional
• Windows Vista Ultimate • Windows Vista Enterprise • Windows Vista Business • Windows Vista Home Premium • Windows Vista Home Basic • Windows Vista Starter • Windows Vista Ultimate 64-bit Edition • Windows Vista Enterprise 64-bit Edition • Windows Vista Home Premium 64-bit Edition • Windows Vista Home Basic 64-bit Edition • Windows Vista Service Pack 1, when used with: Windows Vista Enterprise 64-bit Edition Windows Vista Home Basic 64-bit Edition Windows Vista Home Premium 64-bit Edition Windows Vista Ultimate 64-bit Edition Windows Vista Business Windows Vista Home Basic Windows Vista Home Premium Windows Vista Starter Windows Vista Ultimate
• Windows Server 2008 for Itanium-Based Systems • Windows Server 2008 Datacenter • Windows Server 2008 Enterprise • Windows Server 2008 Standard • Windows Web Server 2008
Back to the top
kbexpertiseinter kbpubtypekc kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertisebeginner KB951698
Back to the top
Other Support Options Need More Help? Contact a Support professional by Email, Online or Phone.Customer Service For non-technical assistance with product purchases, subscriptions, online services, events, training courses, corporate sales, piracy issues, and more.Newsgroups Pose a question to other users. Discussion groups and Forums about specific Microsoft products, technologies, and services.