cve/2005/CVE-2005-2753.md

CVE-2005-2753

Description

Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string.

POC

Reference

• http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt
• http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt
• http://www.securityfocus.com/bid/15306
• http://www.securityfocus.com/bid/15306

Github

No PoCs found on GitHub currently.