MS05-050: Vulnerability in DirectShow Could Allow Remote Code Execution (904706)

The remote host contains a version of DirectX that is vulnerable to a remote code execution flaw. To exploit this flaw, an attacker would need to send a specially malformed .avi file to a user on the remote host and have him open it. C Tenable Network Security, Inc. include"compat.inc"; if...

Policy - DirectX Gaming Server Detection

Binary data 1201.prm...

Microsoft DirectX DirectPlay Remote Malformed Packet Denial Of Service Vulnerability

Description Microsoft DirectX DirectPlay is affected by a remote denial of service vulnerability. This issue is due to a failure of the affected library to properly handle malformed network data. An attacker can exploit this vulnerability to cause an application using the affected DirectPlay...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

Multiple bugs in ActiveX components

Local files access in applet com.ms.xml.dso.XMLDSO.class and XMLHTTPConnection ActiveX, buffer overflow in xweb.ocx ActiveX Microsoft DirectX Files Viewer, TSAC and File Transfer Manager FTM ActiveX...

Windows DirectX MIDI integer overflow

Integer overflow during MIDI processing leads to heap corruption allowing code execution...

CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library Original issue date: July 25, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Microsoft Windows systems running...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

CVE-2003-0346

CVE-2003-0346, CAN CAN-2003-0346 is tied to a heap-based overflow in the Microsoft DirectX QUARTZ.DLL MIDI handling. A specially crafted MIDI file that sets an oversized Text/Copyright string or an excessive number of MThd tracks can trigger integer overflow, heap corruption, and arbitrary code e...

Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate the number of tracks value in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial o...

Microsoft Security Bulletin MS03-030: Unchecked Buffer in DirectX Could Enable System Compromise (Q819696)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in DirectX Could Enable System Compromise 819696 Date: July 23, 2003 Software: Microsoft DirectXr 5.2 on Windows 98 Microsoft DirectX 6.1 on Windows 98 SE Microsoft...

Microsoft Windows DirectX MIDI library does not adequately validate Text or Copyright parameters in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate certain parameters in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of servic...

MS03-030: DirectX MIDI Overflow (819696)

The remote host is running a version of Windows with a version of DirectX that is vulnerable to a buffer overflow attack involving the module that handles MIDI files. To exploit this flaw, an attacker needs to craft a rogue MIDI file and send it to a user of this computer. When the user attempts ...

CVE-2002-0975

Buffer overflow in Microsoft DirectX Files Viewer ActiveX control xweb.ocx 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter...

CVE-2002-0975

Buffer overflow in Microsoft DirectX Files Viewer ActiveX control xweb.ocx 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter...

CVE-2002-0975

CVE-2002-0975 is an advisory for the Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) version 2.0.6.15 and earlier. The vulnerability is triggered by a long File parameter, leading to a buffer overflow that allows remote attackers to execute arbitrary code. The connected documents corrob...

Repost: Buffer overflow in Microsoft DirectX Files Viewer xweb.ocx (<2,0,16,15) ActiveX sample

Hi BugTraq reader, I would like to inform you about security issue in DirectX Files Viewer control was available on ActiveX gallery page http://activex.microsoft.com/activex site but fixed not so long time ago. ========================================================= Overview: Risk: High...

Update for DirectX 9 for Windows 2000 (KB976138)

Update for DirectX 9 for Windows 2000 KB976138...

Security Update for DirectX 9 for Windows 2000 (KB951698)

A security issue has been identified in Microsoft DirectShow that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...

Security Update for DirectX 8 for Windows 2000 (KB971633)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...