CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The INMIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a MIDI file with a large "Track data size" value...

CVE-2003-0765

The CVE-2003-0765 entry affects the IN_MIDI.DLL plugin (version 3.01 and earlier) used by Winamp 2.91. According to the description, a remote attacker could execute arbitrary code by feeding a MIDI file containing a large Track data size value. The connected documents confirm Winamp/IN_MIDI.DLL a...

Winamp 2.91 lets code execution through MIDI files

Luigi Auriemma Application: Winamp http://www.winamp.com and http://classic.winamp.com Versions: Winamp 2.91 using INMIDI.DLL 3.01 Winamp 3 crashes but I have not found methods to execute code Platforms: Windows Bugs: Code execution through malformed MIDI files Risk: medium/high exploitation has...

WinAmp buffer overflow

Buffer overflow on MIDI files parsing...

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin IN_MIDI.dll Track Data Size Buffer Overflow (PoC)

NullSoft Winamp 2.812.913.03.1 - MIDI Plugin INMIDI.dll Track Data Size Buffer Overflow PoC source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a...

NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8567/info Winamp MIDI plugin, INMIDI.DLL has been reported prone to a buffer overflow issue when handling malicious MIDI files. The issue presents itself when a malicious value is passed as the Track Data Size of a malicious MIDI file header. Although...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

Windows DirectX MIDI integer overflow

Integer overflow during MIDI processing leads to heap corruption allowing code execution...

CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-18 Integer Overflows in Microsoft Windows DirectX MIDI Library Original issue date: July 25, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Microsoft Windows systems running...

CVE-2003-0346

CVE-2003-0346, CAN CAN-2003-0346 is tied to a heap-based overflow in the Microsoft DirectX QUARTZ.DLL MIDI handling. A specially crafted MIDI file that sets an oversized Text/Copyright string or an excessive number of MThd tracks can trigger integer overflow, heap corruption, and arbitrary code e...

CVE-2003-0346

Multiple integer overflows in a Microsoft Windows DirectX MIDI library QUARTZ.DLL allow remote attackers to execute arbitrary code via a MIDI .mid file with 1 large length for a Text or Copyright string, or 2 a large number of tracks, which leads to a heap-based buffer overflow...

Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate the number of tracks value in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial o...

EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption

Windows MIDI Decoder QUARTZ.DLL Heap Corruption Release Date: July 23, 2003 Severity: High Remote Code Execution Systems Affected: Windows 98 Windows 98 SE Windows Millennium Edition Windows NT 4.0 Windows NT 4.0, Terminal Server Edition Windows 2000 Windows XP Windows Server 2003 Description: A...

Microsoft Windows DirectX MIDI library does not adequately validate Text or Copyright parameters in MIDI files

Overview A Microsoft Windows DirectX library, quartz.dll, does not properly validate certain parameters in Musical Instrument Digital Interface MIDI files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of servic...

MS03-030: DirectX MIDI Overflow (819696)

The remote host is running a version of Windows with a version of DirectX that is vulnerable to a buffer overflow attack involving the module that handles MIDI files. To exploit this flaw, an attacker needs to craft a rogue MIDI file and send it to a user of this computer. When the user attempts ...