CVE-2007-3895

HIGH · CVSS 9.3 EPSS 36.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-12-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-3895

Severity

HIGH

CVSS

9.3

EPSS

36.23%

Microsoft

Original Filing — NVD Description

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.