6.8
CVSSv2

CVE-2007-0015

Published: 01/01/2007 Updated: 19/10/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 695
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in Apple QuickTime 7.1.3 allows remote malicious users to execute arbitrary code via a long rtsp:// URI.

Vulnerable Product Search on Vulmon Subscribe to Product

apple quicktime 7.1.3

Exploits

#!/usr/bin/python #Port bind exploit for apple quicktime rtsp vulnerability #Tested on windows 2000 SP0 and SP4 with quicktime 713100 Should be easy #to port the exploit to others All one needs to do is look for the appropriate #jump address Certain characters are not permitted in the shellcode #Alphanumeric shellcodes work fine #This scrip ...
#!/usr/bin/ruby # Copyright (c) LMH <lmh [at] info-pullcom> # Kevin Finisterre <kf_lists [at] digitalmunitioncom> # # Notes: # Our command string is loaded on memory at a static address normally, # but this depends on execution method and the string length The address set in this exploit will # be likely successful if w ...
## # $Id: apple_quicktime_rtsprb 9220 2010-05-04 23:09:32Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' c ...