CVE-2012-3752

CVE-2012-3752 is a critical vulnerability affecting Apple QuickTime versions prior to 7.7.3, stemming from multiple buffer overflows. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by providing a specially crafted style element within a QuickTime TeXML file. With a CVSS score of 9.3, it represents a severe risk due to its network-based attack vector, low authentication requirements, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a Metasploit module exists for exploitation, indicating readily available exploit code, though there is no evidence of widespread active exploitation or significant community discussion.