VDB
CVE-2003-0050
CVE-2003-0050
PUBLISHED
CVSS 7.5 HIGH
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.
EPSS 68.86% · 99.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
68.86%
99.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apple | darwin_streaming_server | 4.1.2 |
| apple | quicktime_streaming_server | 4.1.1 |
| n/a | n/a | n/a |
Timeline
- Mar 7, 2003 CVE Published
- Jul 3, 2010 PoC Published
- May 29, 2018 PoC Published
- Dec 1, 2020 VulnCheck KEV Exploitation
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score