VDB
CERTCC-2003-265232
CERTCC-2003-265232
PUBLISHED
A Microsoft Windows DirectX library, quartz.dll, does not properly validate the number of tracks value in Musical Instrument Digital Interface (MIDI) files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of service.
Timeline
- Jul 23, 2003 CVE Published
- Jul 30, 2003 CVE Updated
- Mar 17, 2026 Security Advisory
References
- Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files advisory
- Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files url
- Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files advisory
- Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files advisory
- Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files advisory