Unscored CVE-2003-0346 EUVD-2003-0341GHSA-wpf2-wvqg-3wf6

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a …

Published Jul 25, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.

References

oval:org.mitre.oval:def:218 vdb-entry signature
VU#561284 third-party-advisory
CA-2003-18 third-party-advisory
oval:org.mitre.oval:def:1104 vdb-entry signature
VU#265232 third-party-advisory
oval:org.mitre.oval:def:1095 vdb-entry signature
20030723 EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption mailing-list
MS03-030 vendor-advisory