Sploitus

4 exploited vulnerabilities in Quicktime Player

Vulnerabilities with publicly known exploits

Vendors
Apple
With known exploits
4
Affected Apple Itunes versions
= 8.0.2.20
Affected Apple Quicktime versions
= 7.5.5, 7.3.1.70, 7.4, 5.0, 6.0, 5.0.1, 5.0.2

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2008-5406 1 exploit
CVSS 9.3 HIGH 2008-12-09FIX AVAILABLE
Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)
CVE-2008-0234 2 exploits
CVSS 9.3 HIGH 2008-01-10FIX AVAILABLE
QuickTime Player 7.3.1.70 - 'RTSP' Remote Buffer OverflowQuickTime Player 7.3.1.70 - 'RTSP' Buffer Overflow (PoC)
CVE-2003-0168
CVSS 7.5 HIGH 2003-04-01FIX AVAILABLE
CVE-2002-0252 6 exploits
CVSS 7.5 HIGH 2002-05-03FIX AVAILABLE
Apple QuickTime 7.2/7.3 - RSTP Response Universal Exploit (win/osx)aquick-winosx.txt