---
title: "Security digest: May 28, 2009"
url: https://erroneo.us/security/2009-05-28/
description: "May 28, 2009 vulnerability digest: 1 brief (DirectX CVE-2009-1537: 2009 QuickTime Parser Bug…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2009-05-28
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: May 28, 2009

1 editorial brief.

## Take stock

- Most can relax: DirectX CVE-2009-1537: 2009 QuickTime Parser Bug in KEV . Anyone still running Windows XP, Windows Server 2003 or Windows 2000, typically in industrial, medical, lab or kiosk systems, especially if users open media files or browse the web on them.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Most can relax** [DirectX CVE-2009-1537: 2009 QuickTime Parser Bug in KEV](https://erroneo.us/security/briefs/directx-quicktime-parser-cve-2009-1537-kev/index.md): Only Windows 2000, XP and Server 2003 have the vulnerable QuickTime parser, it was patched in July 2009, and those systems have been unsupported for over a decade; find and isolate any that remain rather than worrying about this CVE.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2009-05-28/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt