cvelist/2003/0xxx/CVE-2003-0346.json
2019-03-17 23:21:27 +00:00

97 lines
3.3 KiB
JSON

{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0346",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "oval:org.mitre.oval:def:218",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A218"
},
{
"name": "VU#561284",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/561284"
},
{
"name": "CA-2003-18",
"refsource": "CERT",
"url": "http://www.cert.org/advisories/CA-2003-18.html"
},
{
"name": "oval:org.mitre.oval:def:1104",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1104"
},
{
"name": "VU#265232",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/265232"
},
{
"name": "oval:org.mitre.oval:def:1095",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1095"
},
{
"name": "20030723 EEYE: Windows MIDI Decoder (QUARTZ.DLL) Heap Corruption",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq&m=105899759824008&w=2"
},
{
"name": "MS03-030",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-030"
}
]
}
}