what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Tom Gallagher

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

Posted Jul 18, 2013

Authored by Jason Kratzer, sinn3r, Paul Bates, Tom Gallagher | Site metasploit.com

This Metasploit module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and allows arbitrary code execution under the context of the user.

tags | exploit, overflow, arbitrary, code execution

systems | apple

advisories | CVE-2013-1017

SHA-256 | 15145b2469bd29030e19b5448ca2e224d6efff120fdd50fb770f210db2a4b736

Download | Favorite | View