AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2003-0346

HIGH · CVSS 7.5 EPSS 32.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-08-27 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft, Windows. Its EPSS score suggests a 32.7% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2003-0346
Severity
HIGH
CVSS
7.5
EPSS
32.67%
Microsoft Windows

Original NVD Description

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.