Vulnerability Details : CVE-2013-1017
Public exploit exists!
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
Vulnerability category: OverflowExecute codeDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2013-1017
Probability of exploitation activity in the next 30 days: 97.28%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2013-1017
-
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
Disclosure Date: 2013-05-22First seen: 2020-04-26exploit/windows/browser/apple_quicktime_rdrfThis module exploits a vulnerability found in Apple Quicktime. The flaw is triggered when Quicktime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially craft -
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
Disclosure Date: 2013-05-22First seen: 2020-04-26exploit/windows/fileformat/apple_quicktime_rdrfThis module exploits a vulnerability found in Apple QuickTime. The flaw is triggered when QuickTime fails to properly handle the data length for certain atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer overflow by loading a specially craft
CVSS scores for CVE-2013-1017
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2013-1017
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-1017
-
http://support.apple.com/kb/HT5770
About the security content of QuickTime 7.7.4 - Apple SupportVendor Advisory
-
http://lists.apple.com/archives/security-announce/2013/May/msg00001.html
Apple - Lists.apple.comVendor Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16606
Repository / Oval Repository
Products affected by CVE-2013-1017
- cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.7:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.5:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.6:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.8:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.7.0:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.6.9:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.7.1:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista
- cpe:2.3:a:apple:quicktime:7.7.2:*:*:*:*:*:*:*When used together with: Microsoft » Windows Vista