rapid7/metasploit-framework — pull request #535 by wchen-r7 (2012-06-27 19:43:39+00:00)
Title: Add CVE-2012-0663 Apple QuickTime TeXML Exploit

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. The flaw is generally known as a bug while processing the 'transform' attribute, however, that attack vector seems to only cause a TerminateProcess call due to a corrupt stack cookie, and more data will only trigger a warning about the malformed XML file. This module exploits the 'color' value instead, which accomplishes the same thing.