CVE-2003-1091

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Apple QuickTime/Darwin Streaming MP3Broadcaster - ID3 Tag Handling2003-05-22 · remote · osx · Verified

Impact

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://archives.neohapsis.com/archives/bugtraq/2003-05/0245.html
• http://securitytracker.com/id?1006822
• http://www.kb.cert.org/vuls/id/148564
• http://www.securityfocus.com/bid/7660
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12054
• http://archives.neohapsis.com/archives/bugtraq/2003-05/0245.html
• http://securitytracker.com/id?1006822
• http://www.kb.cert.org/vuls/id/148564
• http://www.securityfocus.com/bid/7660
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12054