EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption

Windows MIDI Decoder QUARTZ.DLL Heap Corruption Release Date: July 23, 2003 Severity: High Remote Code Execution Systems Affected: Windows 98 Windows 98 SE Windows Millennium Edition Windows NT 4.0 Windows NT 4.0, Terminal Server Edition Windows 2000 Windows XP Windows Server 2003 Description: A...

Microsoft Windows DirectX MIDI library does not adequately validate Text or Copyright parameters in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate certain parameters in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of servic...

MS03-030: DirectX MIDI Overflow (819696)

The remote host is running a version of Windows with a version of DirectX that is vulnerable to a buffer overflow attack involving the module that handles MIDI files. To exploit this flaw, an attacker needs to craft a rogue MIDI file and send it to a user of this computer. When the user attempts ...