CVE-2013-1017

Apple QuickTime <7.7.4 - RCE

Title source: llm

Description

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/27012
metasploit WORKING POC NORMAL
by Jason Kratzer, Tom Gallagher, Paul Bates, sinn3r · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/apple_quicktime_rdrf.rb
metasploit WORKING POC NORMAL
by Jason Kratzer, Tom Gallagher, Paul Bates, sinn3r · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/apple_quicktime_rdrf.rb

References (3)

Scores

EPSS 0.8130
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (50)
apple/quicktime 3.0
apple/quicktime 4.1.2
apple/quicktime 5.0
apple/quicktime 5.0.1
apple/quicktime 5.0.2
apple/quicktime 6.0
apple/quicktime 6.0.0
apple/quicktime 6.0.1
apple/quicktime 6.0.2
apple/quicktime 6.1
... and 40 more
Published May 24, 2013
Tracked Since Feb 18, 2026