also @ TechSpot: Toshiba abandons netbook market in US, focuses on Ultrabooks instead

Microsoft reveals DirectX 'critical' flaw

By

On July 24, 2003, 12:09 AM EST

The flaw is unusually widespread, affecting all versions of DirectX from version 5.2 to the current 9.0a running on all versions of Windows from Windows 98 through the new Windows Server 2003, according to the Microsoft bulletin.

The flaw, which received Microsoft's highest severity rating, involves the way DirectX handles MIDI music files. A malformed MIDI file could overrun the buffer in DirectX, at which point extra software embedded in the file would be executed.
Exploiting the flaw would entail the creation of a maliciously malformed MIDI file, which vulnerable Windows users would have to be tricked into running, either through e-mail or a Web page.

Read more: [URL=http://news.com.com/2100-1002_3-5053428.html?tag=fd_top]CNet News[/URL].

Related Stories

No tags on this story

User Comments (5)

Post a comment
Abraxas
on July 24, 2003
6:08 AM
Does 9.0b fix that?

Reply

Phantasm66
on July 24, 2003
7:24 AM
I don't know (have not checked) but I would imagine that that would explain 9.0b 's sudden arrival I have certainly downloaded and installed 9.0b as soon as I [url=http://www.techspot.com/vb/showthread.php?s=&threadid=6
23]read about it here[/url].

Reply

---agissi---
on July 24, 2003
11:27 PM
Another bug 8) Do they ever check they're software for this kind of stuff?? Its posted [b]all the time[/b]

Reply

XtR-X
on July 25, 2003
2:31 AM
I guess it's safe to say that we should all avoid MIDIs for a short while until the problem is completely solved.The scary thing is that we can trail off to a site that has embedded MIDI inside the HTML and we could be attacked by it.

Reply

TS | Thomas
on July 25, 2003
7:17 PM
Yes, DirectX 9.0b fixes this.

Reply

Browse more commented news

Post a new comment

Guest user

To post as an anonymous
user click here
.

Members

If you are a TechSpot member,
please login first.


By signing up you gain complete access to the TechSpot community. Join thousands of computer and technology enthusiasts that contribute and share knowledge in our forum. Post messages, get a private inbox, upload your own photo gallery and more.

Subscribe to TechSpot

Get free exclusive content, learn about new features and tech breaking news.