Article ID: 819696 - Last Review: July 30, 2007 - Revision: 10.6 MS03-030: Unchecked Buffer in DirectX Could Enable System CompromiseTechnical update
On This PageSYMPTOMSDirectX is made up of a set of low-level Application
Programming Interfaces (APIs) that is used by Windows programs for multimedia
support. The DirectShow technology in DirectX performs client-side audio and
video sourcing, manipulation, and rendering. There are two buffer overruns that
have the same effects in the function that is used by DirectShow to check
parameters in a Musical Instrument Digital Interface (MIDI) file. These buffer
overruns may cause a security vulnerability because a malicious user could try
to exploit these flaws and run code in the security context of the logged on
user. An attacker might try to exploit this vulnerability by creating a specially crafted MIDI file that is designed to exploit this vulnerability and then host this file on a Web site or on a network share or send it by means of an HTML e-mail message. If the file was hosted on a Web site or on a network share, the user would have to open the specially crafted file. If the file was embedded in a page, the vulnerability could be exploited when a user visits the Web page. If the file is sent in an HTML e-mail message, the vulnerability could be exploited when a user opens or previews the HTML e-mail message. A successful attack could either cause DirectShow or a program that is using DirectShow to fail, or it could cause an attacker's code to run on the user's computer in the security context of the user. Mitigating factors
RESOLUTIONService pack informationWindows XPThe Microsoft Windows XP version of the security patch is included in Windows XP Service Pack 2 (SP2). To resolve this problem, obtain the latest service pack for Microsoft Windows XP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:322389
(http://support.microsoft.com/kb/322389/EN-US/
)
How to obtain the latest Windows XP service pack Windows 2000The Microsoft Windows 2000 version of the security patch is included in Windows 2000 Service Pack 4 (SP4). To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:260910
(http://support.microsoft.com/kb/260910/
)
How to obtain the latest Windows 2000 service pack
Security patch informationDownload informationMicrosoft has released DirectX 9.0b and individual security patches for operating systems where DirectX 9.0b is not available.Perform the following steps to determine the current version of DirectX on all operating systems except Microsoft Windows NT 4.0:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ActiveSetup\InstalledComponents\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\IsInstalled DirectX 9.0b can be installed on all affected operating systems
except 64-bit editions of Windows Server 2003, 64-bit editions of Microsoft
Windows XP, and Windows NT 4.0, regardless of the previous version of
DirectX. The following
files are available for download from the Microsoft Download Center:
Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() Note This patch also installs on Windows 98 Second Edition and Windows 98 with DirectX 8, although these versions of Windows are no longer supported. If you use DirectX 7.0 on Windows 2000, install the following patch: Collapse this image ![]() Collapse this image ![]() Collapse this image ![]() For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: 119591
(http://support.microsoft.com/kb/119591/EN-US/
)
How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most
current virus-detection software that was available on the date that the file
was posted. The file is stored on security-enhanced servers that help to
prevent any unauthorized changes to the file.
PrerequisitesDirectX 8 and DirectX 9 do not support systems with 486-class processors. DirectX 9.0b requires Windows Server 2003 (all versions except Windows Server 2003 64-bit editions), Windows XP (all versions except Windows XP 64-bit editions), Windows 2000 Service Pack 3 (SP3), Windows 2000 Service Pack 4 (SP4), or Microsoft Windows Millennium Edition.The DirectX 9.0a security patch requires a previous installation of DirectX 9.0 or 9.0a on Windows Server 2003 (all versions except Windows Server 2003 64-bit editions), Windows XP (all versions except Windows XP 64-bit editions), Windows 2000 Service Pack 3 (SP3), Windows 2000 Service Pack 4 (SP4), or Windows Millennium Edition. The use of the DirectX 9.0b package is preferred because it provides additional non-security core graphics and DirectShow fixes. The DirectX 8.1 security patch requires the released version of Windows Server 2003, the released version of Windows XP, or Windows XP Service Pack 1 (SP1). For additional information, click the following article number to view the article in the Microsoft Knowledge Base: 322389
(http://support.microsoft.com/kb/322389/
)
How
to obtain the latest Windows XP Service Pack
The DirectX 8 security patch for Windows 2000 and
Windows Millennium Edition requires a previous installation of DirectX 8.0,
8.0a, 8.1, 8.1a, or 8.1b on Windows 2000 Service Pack 3 (SP3), Windows 2000
Service Pack 4 (SP4), or Windows Millennium Edition. Note that Microsoft
recommends the use of DirectX 9.0b on this platform, because it provides
additional non-security core graphics and DirectShow fixes.The DirectX 7.0/7.0a security patch requires Windows 2000 Service Pack 3 (SP3). For additional information, click the following article number to view the article in the Microsoft Knowledge Base: 260910
(http://support.microsoft.com/kb/260910/
)
How
to obtain the latest Windows 2000 service pack
The Windows NT 4.0 security patch requires Windows
NT 4.0 Service Pack 6a (SP6a) or Windows NT Server 4.0, Terminal Server Edition
Service Pack 6 (SP6) running Internet Explorer 6.0 SP1 or Microsoft Windows
Media Player 6.4. For additional information, click the following
article number to view the article in the Microsoft Knowledge Base: 152734
(http://support.microsoft.com/kb/152734/
)
How to obtain the latest Windows
NT 4.0 service pack
The following table lists the appropriate patch to
install based on your operating system and your DirectX version:
Collapse this table
Installation InformationYou must be logged on as an administrator to install DirectX 9.0b or the security patch. Because of End User Licensing Agreement (EULA) acceptance requirements, DirectX 9.0b has no Setup switches.Microsoft recommends that you create a System Restore point on Windows XP or Windows Millennium Edition before you install DirectX 9.0b. For additional information about System Restore, click Start and then click Help and Support. In the Search box, type system restore, and then press ENTER. The DirectX 9.0a and DirectX 8 security patches supports the following Setup switches:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectX\Version To verify that the DirectX 9.0a security patch is installed on
your computer, confirm that the following registry key is present and that it
has a value of 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\DirectX\dx819696\IsInstalled To verify that DirectX 8.0, 8.0a, 8.1, 8.1a, or 8.1b is installed
on your Windows 2000 or Windows Millennium Edition computer, confirm that the
following registry key exists and that its value is in the range of
4.08.00.0400 to 4.08.01.0901, inclusive: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectX\Version To verify that the DirectX 8 security patch is installed on your
computer, confirm that the following registry key is present and that it has a
value of 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\DirectX\dx819696\IsInstalled To verify that the DirectX 8.1 or 7.0/7.0a patch is installed on
your computer, confirm that the following registry key exists, as appropriate:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q819696 Deployment informationBecause of EULA acceptance requirements, DirectX 9.0b cannot be installed silently. Volume license customers may obtain a modified package that supports silent installation by contacting DirectX@Microsoft.com (mailto:DirectX@Microsoft.com) .To install the DirectX 9.0a security patch without any user intervention, use the following command line: directx9-kb819696-x86-enu /q:a To install this patch without forcing the computer to restart,
use the following command line: directx9-kb819696-x86-enu /q:r Note These switches can be combined in one command line.To install the DirectX 8.1 or 7.0/7.0a security patch without any user intervention, use the following command line: windowsserver2003-kb819696-x86-enu /u /q To install this patch without forcing the computer to restart,
use the following command line: windowsserver2003-kb819696-x86-enu /z Note The file name in these examples may differ depending on the patch
that you are installing. These switches can be combined in one command
line.For information about how to deploy this patch with Software Update Services, visit the following Microsoft Web site: http://technet.microsoft.com/en-us/wsus/bb466201.aspx
(http://technet.microsoft.com/en-us/wsus/bb466201.aspx)
Restart requirementYou must restart your computer after you install DirectX 9.0b or after you apply this patch.Removal informationDirectX 9.0b replaces key operating system components and cannot be removed. To remove the security patch, use the Add/Remove Programs tool in Control Panel. System administrators can use the Spunist.exe utility to remove the patch from Windows Server 2003-based, Windows XP-based, and Windows 2000-based computers. Spuninst.exe is in the %Windir%\$NTUninstallKB819696$\Spuninst folder, and it supports the following Setup switches:
Patch replacement informationThe Windows NT 4.0 version of this patch replaces the patch that is available in Microsoft Knowledge Base article 269849. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:269849
(http://support.microsoft.com/kb/269849/
)
Access violation error message when you use Windows Media Player 6.4 to play .wav files
File informationThe English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.819696 patch for Windows Server 2003 and Windows XP: Date Time Version Size File name ------------------------------------------------------------ 13-May-2003 23:41 6.4.3790.9 1,173,504 Quartz.dll (gdr) 13-May-2003 23:48 6.4.3790.9 1,117,184 Quartz.dll (qfe) Date Time Version Size File name Platform ------------------------------------------------------------------- 16-May-2003 00:50 6.4.3790.9 3,348,480 Quartz.dll IA64 (gdr) 16-May-2003 01:10 6.4.3790.9 1,129,984 Wquartz.dll IA64 (gdr) 16-May-2003 01:08 6.4.3790.9 3,348,480 Quartz.dll IA64 (qfe) 16-May-2003 01:11 6.4.3790.9 1,117,184 Wquartz.dll IA64 (qfe) Date Time Version Size File name -------------------------------------------------------- 13-May-2003 17:28 6.4.2600.1221 1,132,032 Quartz.dll Date Time Version Size File name ------------------------------------------------------- 13-May-2003 19:27 6.4.2600.113 1,123,840 Quartz.dll Date Time Version Size File name Platform ------------------------------------------------------------------- 13-May-2003 17:29 6.4.2600.1221 3,881,472 Quartz.dll IA64 12-May-2003 04:34 6.4.2600.1221 1,132,032 Wquartz.dll IA64 Date Time Version Size File name -------------------------------------------------- 03-Jul-2003 17:28 6.1.9.729 791.312 Quartz.dll Date Time Version Size File name -------------------------------------------------- 08-Jul-2003 21:49 6.1.5.132 762,128 Quartz.dll Date Time Version Size File name ---------------------------------------------------------------- 30-May-2003 09:00 6.5.1.902 1,246,208 Quartz.dll (end user) 30-May-2003 09:00 6.5.1.902 1,962,496 Quartz.dll (redist) Date Time Version Size File name ---------------------------------------------------------------- 30-May-2003 09:00 6.5.1.902 1,136,640 Quartz.dll (end user) 30-May-2003 09:00 6.5.1.902 1,962,496 Quartz.dll (redist) Date Time Version Size File name ---------------------------------------------------------------- 30-May-2003 09:00 6.5.1.902 1,128,960 Quartz.dll (end user) 30-May-2003 09:00 6.5.1.902 1,845,248 Quartz.dll (redist) Date Time Version Size File name ---------------------------------------------------------------- 06-Aug-2003 19:44 6.3.1.886 1,696,748 Quartz.dll
STATUS Microsoft has confirmed that this problem
may cause a degree of security vulnerability in the Microsoft products that are
listed at the beginning of this article.
Windows XP This problem was first corrected in Microsoft Windows XP Service Pack 2. MORE INFORMATION For more information about this vulnerability, visit the
following Microsoft Web site: http://www.microsoft.com/technet/security/bulletin/MS03-030.mspx
(http://www.microsoft.com/technet/security/bulletin/MS03-030.mspx)
For
additional information about the Microsoft DirectX diagnostic tool, click the
following article number to view the article in the Microsoft Knowledge Base: 190900
(http://support.microsoft.com/kb/190900/
)
DirectX: Description of the DirectX diagnostic tool
The following sections describe the DirectX versions
that are reported by Dxdiag.exe for the original Microsoft shipping
configuration.DirectX 8.1
DirectX 7.0a
DirectX 7.0
DirectX 6.1
DirectX 5.2
DirectX and DirectX Media were separate products until the release of DirectX 8.0. Subsequent releases have integrated both products under the DirectX name. Dxdiag only reports the DirectX version, but the affected file is in DirectX Media for systems that have versions that are earlier than DirectX 8.0. APPLIES TO
| Article Translations
|
Back to the top

