20030522 QuickTime/Darwin Streaming Server security issuesmailing list
http://archives.neohapsis.com/archives/bugtraq/2003-05/0245.html CVE-2003-1091
Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling
Record summary
CVE-2003-1091 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBApple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag HandlingExploitDB exploitby Sir MordredNot analyzed1 file
References
61006822vdb entry
http://securitytracker.com/id?1006822 VU#148564Third-party advisory
http://www.kb.cert.org/vuls/id/148564 7660vdb entry
http://www.securityfocus.com/bid/7660 darwin-mp3broadcaster-code-execution(12054)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/12054 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1091