A remote overflow exists in Microsoft DirectX. The 'QUARTZ.DLL' library fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted AVI movie file, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

• Security Tracker: 1015034
• Secunia Advisory ID: 17160 17172 17223
• SCIP VulDB ID: 1795
• CVE ID: 2005-2128 (see also: NVD)
• Keyword: 2005006318 EEYEB-20050510
• Microsoft Knowledge Base Article: 904706
• Mail List Post: http://archives.neohapsis.com:80/archives/vulnwatch/2005-q4/0009.html
• Other Advisory URL: http://research.eeye.com/html/advisories/published/AD20051011a.html
• Vendor Specific Advisory URL: http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
  http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=361442&RenditionID=
  http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=366955&RenditionID=
• Vendor URL: http://www.microsoft.com/
• Microsoft Security Bulletin: MS05-050

• Fang Xing - eEye Digital Security