CVE-2012-3753
Apple QuickTime < 7.7.3 - Remote Code Execution via Crafted MIME Type
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3753.
PoCs published by Metasploit, Pavel Polischouk, juan vazquez, including Metasploit module exploits/windows/browser/apple_quicktime_mime_type.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Apple QuickTime 7.7.2 via a malformed Content-Type header, achieving remote code execution on Windows XP SP3 with Safari 5.1.7 or 5.0.5. It uses heap spraying and ROP techniques to bypass memory protections.
Description
Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.
Exploits (2)
This Metasploit module exploits a buffer overflow in Apple QuickTime 7.7.2 via a malformed Content-Type header, achieving remote code execution on Windows XP SP3 with Safari 5.1.7 or 5.0.5. It uses heap spraying and ROP techniques to bypass memory protections.
This Metasploit module exploits a stack-based buffer overflow in Apple QuickTime 7.7.2 via a malformed Content-Type header. It uses heap spraying and ROP techniques to achieve remote code execution on vulnerable Windows systems running Safari.