cve/2008/CVE-2008-0234.md

CVE-2008-0234

Description

Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message.

POC

Reference

• http://securityreason.com/securityalert/3537
• http://www.kb.cert.org/vuls/id/112179
• https://www.exploit-db.com/exploits/4885
• https://www.exploit-db.com/exploits/4906

Github

No PoCs found on GitHub currently.