{"uuid": "b579e4a3-aecf-407e-bd59-390e15b0e66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/apple_quicktime_rdrf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Jason Kratzer\", \"Tom Gallagher\", \"Paul Bates\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Apple Quicktime. The flaw is\\n          triggered when Quicktime fails to properly handle the data length for certain\\n          atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer\\n          overflow by loading a specially crafted .mov file, and allows arbitrary\\n          code execution under the context of the current user.\", \"disclosure_date\": \"2013-05-22\", \"fullname\": \"exploit/windows/browser/apple_quicktime_rdrf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Apple Quicktime 7 Invalid Atom Length Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/apple_quicktime_rdrf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/apple_quicktime_rdrf\", \"references\": [\"CVE-2013-1017\", \"OSVDB-93625\", \"BID-60097\", \"URL-http://support.apple.com/kb/HT5770\", \"ZDI-13-110\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Quicktime 7.7.3 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.2 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.1 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.0 with IE 8 on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:59.588406Z"}