Details of VAR-201305-0260

ID

VAR-201305-0260

CVE

CVE-2013-1015

TITLE

Apple QuickTime Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2013-002803

DESCRIPTION

Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the way Apple QuickTime handles textBox elements within a TeXML file. Specifically, the code within QuickTime.qts does not properly validate the coordinate values of the x and y attributes. By providing specially crafted coordinate values, the code can be made to write data ahead of a buffer, leading to memory corruption. Apple QuickTime is prone to a memory-corruption vulnerability. Versions prior to QuickTime 7.7.4 are vulnerable on Windows 7, Vista, and XP. Note: This issue was previously discussed in BID 60086 (Apple QuickTime Prior To 7.7.4 Multiple Arbitrary Code Execution Vulnerabilities), but has been moved to its own record for better documentation. The software is capable of handling multiple sources such as digital video, media segments, and more. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue existed in the handling of TeXML files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1015 : Aniway.Anyway@gmail.com working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of H.263 encoded movie files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1016 : Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of 'dref' atoms. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1017 : Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of H.264 encoded movie files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1018 : G. Geshev working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted MP3 file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of MP3 files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-0989 : G. Geshev working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of Sorenson encoded movie files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1019 : Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue existed in the handling of JPEG encoded data. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1020 : Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted QTIF file may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue existed in the handling of QTIF files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-0987 : roob working with iDefense VCP QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of JPEG encoded data. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1021 : Mil3s beep working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of 'enof' atoms. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-0986 : Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted FPX file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow existed in the handling of FPX files. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-0988 : G. Geshev working with HP's Zero Day Initiative QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: A buffer underflow existed in the handling of 'mvhd' atoms. This issue was addressed through improved bounds checking. CVE-ID CVE-2013-1022 : Andrea Micalizzi aka rgod working with HP's Zero Day Initiative QuickTime 7.7.4 may be obtained from the QuickTime Downloads site: http://support.apple.com/downloads/ The download file is named: "QuickTimeInstaller.exe" Its SHA-1 digest is: 50395ed3c9ac1f8104e0ad18c99a14c03755d060 Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBAgAGBQJRnRFuAAoJEPefwLHPlZEwxAUP/17v2uoUVcz8EqTDyfX5Hntm uAORsTKZ14ZKIN16pNjWNyUMHJSdgOB7DJVbr8ZtaNg4zN2nrZ+tBbAi233uhbe0 1CGwkOkL4bi5JR3btZ7AxORETKMLgwATwahVJZLfRcZp9IMhiIZ5JIP/rmdgH2IL 52/dRRsWrg3Guk36EAqzznelTSeVLP2cQMw9d0ukvsz9jOIMpOJ7FXmv/7K0003c 2m6OtuScfy4Q+BIqql13kZ94cAILPUovIz2L900ry9AQVTbdwwggQ5Tgnf1lqUYy xBnAVFsS/WWwEN4MyNbkdvsQEUc04vBgTN8dIfGUV4M/MLIRzY9TX+uamxoU/FRA cfPSGlcQi21poOJ6a9bzVfPBkmPaz4P0M3VplSbAJAqYpALsMVH332mjd2m1o5pL 5VE8EUGcmHIa1jgdrsiWzYThzJIE+KCY6iW/PemC2DzcNz0uJUChPC/ao9UWPLII 05F0xVO4mGa+UClgX5o5OLvOFecX6redFjXuQk/QVzzDP95GIyAybLjQYeuFVpgD 1KGgF0CYjYuk19hZh+HcfZ9j7RIUOrVdCVFIH0+v+IZwRsAh+6NamvdRWTaI5fjg PiQs1l+8IirII5xrikS6TanUewzdpIyK+pHBtz/OwneLKm79vSYdMLZDQU6deeoN X0HHvIjtkT16kuhL1yMx =lnE0 -----END PGP SIGNATURE-----

Trust: 2.7

sources: NVD: CVE-2013-1015 // JVNDB: JVNDB-2013-002803 // ZDI: ZDI-13-112 // BID: 60110 // VULHUB: VHN-61017 // PACKETSTORM: 121739

AFFECTED PRODUCTS

vendor:	apple	model:	quicktime	scope:	eq	version:	6.1.1	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.3.0	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.5.1	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.5	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.1	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.1.0	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.5.2	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.2.0	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.5.0	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.4.0	Trust: 1.6
vendor:	apple	model:	quicktime	scope:	eq	version:	6.0.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	5.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.9	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.4.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	lte	version:	7.7.3	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.4	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.2.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.5	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	4.1.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.7	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.4.5	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.5.5	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	6.0.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.0.4	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.7.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.6	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.5	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.5.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	6.0.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.2.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.3.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.4.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.6	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	5.0.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	6.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.3	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	3.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.7.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.6.8	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.3.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	5.0.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.7.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.0.0	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.1.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.0.3	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.0.1	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	eq	version:	7.0.2	Trust: 1.0
vendor:	apple	model:	quicktime	scope:	lt	version:	7.7.4 (windows)	Trust: 0.8
vendor:	apple	model:	quicktime	scope:	-	version:	-	Trust: 0.7
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.7.2	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.7.1	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.8	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.7	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.6	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.5	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.4	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.2	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.1	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.5.5	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.3.1.70	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.3.1	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.6	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.5	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.4	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.3	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.2	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1.1	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.0.4	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.0	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.7	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6.9	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.6	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.3	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.2	Trust: 0.3
vendor:	apple	model:	quicktime player	scope:	eq	version:	7.1	Trust: 0.3

sources: ZDI: ZDI-13-112 // BID: 60110 // JVNDB: JVNDB-2013-002803 // CNNVD: CNNVD-201305-518 // NVD: CVE-2013-1015

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-1015
value:	HIGH
Trust: 1.0
NVD:	CVE-2013-1015
value:	HIGH
Trust: 0.8
ZDI:	CVE-2013-1015
value:	HIGH
Trust: 0.7
CNNVD:	CNNVD-201305-518
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-61017
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2013-1015
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
ZDI:	CVE-2013-1015
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.7
VULHUB:	VHN-61017
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: ZDI: ZDI-13-112 // VULHUB: VHN-61017 // JVNDB: JVNDB-2013-002803 // CNNVD: CNNVD-201305-518 // NVD: CVE-2013-1015

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-61017 // JVNDB: JVNDB-2013-002803 // NVD: CVE-2013-1015

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201305-518

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201305-518

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-002803

PATCH

title:	APPLE-SA-2013-05-22-1	url:	http://lists.apple.com/archives/security-announce/2013/May/msg00001.html	Trust: 0.8
title:	HT5770	url:	http://support.apple.com/kb/HT5770	Trust: 0.8
title:	HT5770	url:	http://support.apple.com/kb/HT5770?viewlocale=ja_JP	Trust: 0.8
title:	Apple has issued an update to correct this vulnerability.	url:	http://support.apple.com/kb/HT1222	Trust: 0.7

sources: ZDI: ZDI-13-112 // JVNDB: JVNDB-2013-002803

EXTERNAL IDS

db:	NVD	id:	CVE-2013-1015	Trust: 3.6
db:	BID	id:	60110	Trust: 1.0
db:	JVN	id:	JVNVU92679127	Trust: 0.8
db:	JVNDB	id:	JVNDB-2013-002803	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-1628	Trust: 0.7
db:	ZDI	id:	ZDI-13-112	Trust: 0.7
db:	CNNVD	id:	CNNVD-201305-518	Trust: 0.7
db:	SECUNIA	id:	53520	Trust: 0.6
db:	APPLE	id:	APPLE-SA-2013-05-22-1	Trust: 0.6
db:	VULHUB	id:	VHN-61017	Trust: 0.1
db:	PACKETSTORM	id:	121739	Trust: 0.1

sources: ZDI: ZDI-13-112 // VULHUB: VHN-61017 // BID: 60110 // JVNDB: JVNDB-2013-002803 // PACKETSTORM: 121739 // CNNVD: CNNVD-201305-518 // NVD: CVE-2013-1015

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2013/may/msg00001.html	Trust: 1.7
url:	http://support.apple.com/kb/ht5770	Trust: 1.7
url:	https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a16237	Trust: 1.1
url:	http://support.apple.com/kb/ht1222	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1015	Trust: 0.8
url:	http://jvn.jp/cert/jvnvu92679127/index.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1015	Trust: 0.8
url:	http://secunia.com/advisories/53520	Trust: 0.6
url:	http://www.securityfocus.com/bid/60110	Trust: 0.6
url:	http://www.apple.com/quicktime/	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2013-0987	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1020	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1016	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1019	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1021	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1015	Trust: 0.1
url:	https://www.apple.com/support/security/pgp/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1018	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1017	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-1022	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-0989	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-0986	Trust: 0.1
url:	http://gpgtools.org	Trust: 0.1
url:	http://support.apple.com/downloads/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2013-0988	Trust: 0.1

sources: ZDI: ZDI-13-112 // VULHUB: VHN-61017 // BID: 60110 // JVNDB: JVNDB-2013-002803 // PACKETSTORM: 121739 // CNNVD: CNNVD-201305-518 // NVD: CVE-2013-1015

CREDITS

Aniway.Anyway@gmail.com working with HP's Zero Day Initiative

Trust: 0.9

sources: BID: 60110 // CNNVD: CNNVD-201305-518

SOURCES

db:	ZDI	id:	ZDI-13-112
db:	VULHUB	id:	VHN-61017
db:	BID	id:	60110
db:	JVNDB	id:	JVNDB-2013-002803
db:	PACKETSTORM	id:	121739
db:	CNNVD	id:	CNNVD-201305-518
db:	NVD	id:	CVE-2013-1015

LAST UPDATE DATE

2025-04-11T22:04:31.499000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-13-112	date:	2013-06-11T00:00:00
db:	VULHUB	id:	VHN-61017	date:	2017-09-19T00:00:00
db:	BID	id:	60110	date:	2013-06-12T07:26:00
db:	JVNDB	id:	JVNDB-2013-002803	date:	2013-05-27T00:00:00
db:	CNNVD	id:	CNNVD-201305-518	date:	2013-05-27T00:00:00
db:	NVD	id:	CVE-2013-1015	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-13-112	date:	2013-06-11T00:00:00
db:	VULHUB	id:	VHN-61017	date:	2013-05-24T00:00:00
db:	BID	id:	60110	date:	2013-05-22T00:00:00
db:	JVNDB	id:	JVNDB-2013-002803	date:	2013-05-27T00:00:00
db:	PACKETSTORM	id:	121739	date:	2013-05-23T19:59:58
db:	CNNVD	id:	CNNVD-201305-518	date:	2013-05-27T00:00:00
db:	NVD	id:	CVE-2013-1015	date:	2013-05-24T16:43:58.573