module

Apple QuickTime 7.7.2 MIME Type Buffer Overflow

Disclosed
Nov 7, 2012
Created
May 30, 2018

Description

This module exploits a buffer overflow in Apple QuickTime 7.7.2. The stack
based overflow occurs when processing a malformed Content-Type header. The module
has been tested successfully on Safari 5.1.7 and 5.0.7 on Windows XP SP3.

Authors

Pavel Polischouk
juan vazquez [email protected]

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use exploit/windows/browser/apple_quicktime_mime_type
msf exploit(apple_quicktime_mime_type) > show targets
...targets...
msf exploit(apple_quicktime_mime_type) > set TARGET < target-id >
msf exploit(apple_quicktime_mime_type) > show options
...show and set options...
msf exploit(apple_quicktime_mime_type) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.