Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-0257.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/fileformat/apple_quicktime_pnsize.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Apple QuickTime Player 7.60.92.0 via a crafted .mov file with a malformed PnSize value. It leverages SEH overwrite and alphanumeric shellcode to achieve remote code execution.
Description
Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Apple QuickTime Player 7.60.92.0 via a crafted .mov file with a malformed PnSize value. It leverages SEH overwrite and alphanumeric shellcode to achieve remote code execution.
This Metasploit module exploits a buffer overflow in Apple QuickTime 7.60.92.0 via a crafted PICT PnSize value in a .mov file, achieving arbitrary code execution. It includes DEP bypass via ROP and delivers a payload encoded with alphanumeric upper encoding.