CVE-2013-1017

Related Files

Apple Quicktime 7 Invalid Atom Length Buffer Overflow

Posted Jul 18, 2013

Authored by Jason Kratzer, sinn3r, Paul Bates, Tom Gallagher | Site metasploit.com

This Metasploit module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially crafted .mov file, and allows arbitrary code execution under the context of the user.

tags | exploit, overflow, arbitrary, code execution

systems | apple

advisories | CVE-2013-1017

SHA-256 | 15145b2469bd29030e19b5448ca2e224d6efff120fdd50fb770f210db2a4b736

Download | Favorite | View

Apple Security Advisory 2013-05-22-1

Posted May 23, 2013

Authored by Apple | Site apple.com

Apple Security Advisory 2013-05-22-1 - QuickTime 7.7.4 is now available and addresses multiple issues including buffer overflows and arbitrary code execution vulnerabilities.

tags | advisory, overflow, arbitrary, vulnerability, code execution

systems | apple

advisories | CVE-2013-0986, CVE-2013-0987, CVE-2013-0988, CVE-2013-0989, CVE-2013-1015, CVE-2013-1016, CVE-2013-1017, CVE-2013-1018, CVE-2013-1019, CVE-2013-1020, CVE-2013-1021, CVE-2013-1022

SHA-256 | 86bbe08e4962075f0ac3583cedede6a84c05e0fd1931a516233e0cc9267e7b8c

Download | Favorite | View