CVE-2012-3753

Apple Quicktime < 7.7.2 - Memory Corruption

Title source: rule

Description

Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/22973
metasploit WORKING POC NORMAL
by Pavel Polischouk, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/apple_quicktime_mime_type.rb

Scores

EPSS 0.7806
EPSS Percentile 99.0%

Details

CWE
CWE-119
Status published
Products (50)
apple/quicktime 3.0
apple/quicktime 4.1.2
apple/quicktime 5.0
apple/quicktime 5.0.1
apple/quicktime 5.0.2
apple/quicktime 6.0
apple/quicktime 6.0.0
apple/quicktime 6.0.1
apple/quicktime 6.0.2
apple/quicktime 6.1
... and 40 more
Published Nov 09, 2012
Tracked Since Feb 18, 2026