Integer Overflow Vulnerability in Microsoft DirectX MIDI Library

CVE-2003-0346

Summary

Multiple integer overflow vulnerabilities in the Microsoft Windows DirectX MIDI library (QUARTZ.DLL) can be exploited by remote attackers. These vulnerabilities arise when a specially crafted MIDI (.mid) file is processed, specifically through excessive length of Text or Copyright strings and an unusually high number of tracks. Successful exploitation can lead to heap-based buffer overflows, potentially allowing attackers to execute arbitrary code on the affected system.

References