VDB

GCVE-110-CERTCC-2003-265232

GCVE-110-CERTCC-2003-265232
Advisory Published
Vulnetix · Advisory published July 23, 2003
A Microsoft Windows DirectX library, quartz.dll, does not properly validate the number of tracks value in Musical Instrument Digital Interface (MIDI) files. An attacker could exploit this vulnerability to execute arbitrary code or crash any application using the library, causing a denial of service.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact13population17exploitation0widely_known15score_current29.835ease_of_exploitation15

Aliases

CVE-2003-0346

Transitive aliases

GHSA-wpf2-wvqg-3wf6EUVD-2003-0341CERTCC-2003-561284GSD-2003-0346

References

Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files
advisory
Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files
url
Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files
advisory
Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files
advisory
Microsoft Windows DirectX MIDI library does not adequately validate MThd track values in MIDI files
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›