CVE-2012-3756

CVE-2012-3756 describes a buffer overflow vulnerability in Apple QuickTime versions prior to 7.7.3. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by crafting a malicious rnet box within an MP4 movie file. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV) or public exploit code (Metasploit, Nuclei, ExploitDB), it garnered some community discussion and media coverage at the time of its disclosure.