{"vulnerability": "CVE-2013-1017", "sightings": [{"uuid": "d8f3facf-b64d-4399-8553-2e131c95d4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "4cc459e0-4240-4237-9b72-3268ffc048b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:13.000000Z"}, {"uuid": "1a5b365d-d664-4016-8084-62f2e94409c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/apple_quicktime_rdrf.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "19d8130b-a313-481d-b1ba-1dfce32f1774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/apple_quicktime_rdrf.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "cd118722-3d7e-4c0d-88ce-1f2c70ec6015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-1017", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/27012", "content": "", "creation_timestamp": "2013-07-22T00:00:00.000000Z"}, {"uuid": "b579e4a3-aecf-407e-bd59-390e15b0e66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/apple_quicktime_rdrf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Jason Kratzer\", \"Tom Gallagher\", \"Paul Bates\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Apple Quicktime. The flaw is\\n          triggered when Quicktime fails to properly handle the data length for certain\\n          atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer\\n          overflow by loading a specially crafted .mov file, and allows arbitrary\\n          code execution under the context of the current user.\", \"disclosure_date\": \"2013-05-22\", \"fullname\": \"exploit/windows/browser/apple_quicktime_rdrf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Apple Quicktime 7 Invalid Atom Length Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/apple_quicktime_rdrf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/apple_quicktime_rdrf\", \"references\": [\"CVE-2013-1017\", \"OSVDB-93625\", \"BID-60097\", \"URL-http://support.apple.com/kb/HT5770\", \"ZDI-13-110\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Quicktime 7.7.3 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.2 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.1 with IE 8 on Windows XP SP3\", \"Quicktime 7.7.0 with IE 8 on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:59.588406Z"}, {"uuid": "7fc034a9-05e6-4ee6-b850-7e09434f2d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-1017", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/apple_quicktime_rdrf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Jason Kratzer\", \"Tom Gallagher\", \"Paul Bates\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Apple QuickTime. The flaw is\\n          triggered when QuickTime fails to properly handle the data length for certain\\n          atoms such as 'rdrf' or 'dref' in the Alis record, which may result a buffer\\n          overflow by loading a specially crafted .mov file, and allows arbitrary\\n          code execution under the context of the current user. Please note: Since an egghunter\\n          is used to search for the payload, this may require additional time for\\n          the exploit to complete.\", \"disclosure_date\": \"2013-05-22\", \"fullname\": \"exploit/windows/fileformat/apple_quicktime_rdrf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Apple Quicktime 7 Invalid Atom Length Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/apple_quicktime_rdrf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/apple_quicktime_rdrf\", \"references\": [\"CVE-2013-1017\", \"OSVDB-93625\", \"BID-60097\", \"URL-http://support.apple.com/kb/HT5770\", \"ZDI-13-110\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Quicktime 7.7.0 - 7.7.3 on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:20.917076Z"}]}