CVE-2003-0346

CVE-2003-0346 describes multiple integer overflows in the Microsoft Windows DirectX MIDI library (QUARTZ.DLL). This vulnerability allows remote attackers to execute arbitrary code by crafting malicious MIDI (.mid) files with excessively long Text/Copyright strings or a large number of tracks, leading to a heap-based buffer overflow. With a CVSS score of 7.5, this vulnerability is considered high severity, as it can be exploited remotely with low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.