Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows MIDI解析器quartz.dll远程堆破坏漏洞(MS03-030)
Vulnerability Description
DirectX包含一套低级别API可由Windows程序调用来支持多媒体，其中quartz.dll允许Windows应用程序通过普通接口播放MIDI音乐。Windows Media Player和IE使用此dll来播放MIDI文件。 quartz.dll在处理畸形MIDI文件时存在问题，远程攻击者可以利用这个漏洞构建恶意WEB页面，诱使用户访问，以用户进程权限在系统上执行任意指令。 quartz.dll存在整数溢出而导致的堆破坏漏洞，如果MIDI文件中的Text或Copyright字符串的长度为FFFFF
CVSS Information
N/A
Vulnerability Type
N/A