Test ID:	1.3.6.1.4.1.25623.1.0.11803
Category:	Windows
Title:	DirectX MIDI Overflow (819696)
Summary:	NOSUMMARY
Description:	Description: The remote host is running a version of Windows with a version of DirectX which is vulnerable to a buffer overflow in the module which handles MIDI files. To exploit this flaw, an attacker needs to craft a rogue MIDI file and send it to a user of this computer. When the user attempts to read the file, it will trigger the buffer overflow condition and the attacker may gain a shell on this host. Solution : see http://www.microsoft.com/technet/security/bulletin/MS03-030.mspx Risk factor : High
Cross-Ref:	BugTraq ID: 7370 BugTraq ID: 8262 Common Vulnerability Exposure (CVE) ID: CVE-2003-0346 Bugtraq: 20030723 EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption (Google Search) http://marc.info/?l=bugtraq&m=105899759824008&w=2 http://www.cert.org/advisories/CA-2003-18.html CERT/CC vulnerability note: VU#265232 http://www.kb.cert.org/vuls/id/265232 CERT/CC vulnerability note: VU#561284 http://www.kb.cert.org/vuls/id/561284 Microsoft Security Bulletin: MS03-030 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-030 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1095 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1104 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A218
Copyright	This script is Copyright (C) 2003 Tenable Network Security

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.