Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-0663.
PoCs published by Metasploit, Alexander Gavrun, sinn3r, juan vazquez, including Metasploit module exploits/windows/fileformat/apple_quicktime_texml.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime via a malformed TeXML file, targeting the 'color' attribute to achieve arbitrary code execution. It generates a malicious TeXML file with a crafted payload to trigger the vulnerability.
Description
Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime via a malformed TeXML file, targeting the 'color' attribute to achieve arbitrary code execution. It generates a malicious TeXML file with a crafted payload to trigger the vulnerability.
This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime via a maliciously crafted TeXML file. The vulnerability (CVE-2012-0663) allows arbitrary code execution by overflowing the Style element in the TeXML file, leveraging SEH overwrites for control flow redirection.