CVE-2012-3752
Apple QuickTime < 7.7.3 - Remote Code Execution via TeXML Style Element
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3752.
PoCs published by Metasploit, Arezou Hosseinzad-Amirkhizi, juan vazquez, including Metasploit module exploits/windows/browser/apple_quicktime_texml_font_table.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime 7.7.2 via a maliciously crafted TeXML file. The exploit leverages the font-table field to trigger the overflow and achieve arbitrary code execution under the context of the user.
Description
Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime TeXML file.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime 7.7.2 via a maliciously crafted TeXML file. The exploit leverages the font-table field to trigger the overflow and achieve arbitrary code execution under the context of the user.
This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime 7.7.2 via a maliciously crafted TeXML file. The vulnerability is triggered by an overly long 'font-table' field in the Style element, leading to arbitrary code execution under the context of the user.