CVE-2013-1017
Apple QuickTime < 7.7.4 - Remote Code Execution via Crafted Dref Atoms
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-1017.
PoCs published by Metasploit, Jason Kratzer, Tom Gallagher, Paul Bates, sinn3r, including Metasploit module exploits/windows/browser/apple_quicktime_rdrf.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Apple Quicktime 7 by crafting a malicious .mov file with an invalid atom length, leading to arbitrary code execution via a ROP chain and heap spray.
Description
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
Exploits (3)
This Metasploit module exploits a buffer overflow in Apple Quicktime 7 by crafting a malicious .mov file with an invalid atom length, leading to arbitrary code execution via a ROP chain and heap spray.
This Metasploit module exploits a buffer overflow in Apple Quicktime 7 by crafting a malicious .mov file with an invalid 'rdrf' atom length, leading to arbitrary code execution via a ROP chain and heap spray.
This Metasploit module exploits a buffer overflow in Apple QuickTime (CVE-2013-1017) by crafting a malicious .mov file with an invalid 'rdrf' atom length, leading to arbitrary code execution via an egghunter technique.