Luigi Auriemma

Well, the first bug is now explained in detail here:

http://aluigi.org/adv/quicktimebof-adv.txt

While the "useless" NULL pointer bug in content-base caused by the absence of "://" is still here in case someone can find it interesting or just for curiosity:

nc -l -p 554 -v -v -n < quicktime2.txt

QuickTimePlayer.exe rtsp://127.0.0.1/crash.mp3

Another "useless" bug:
off-by-one in the function which handles the header of the QTL files, place a breakpoint in 0x66965eb6 to see the last step where one byte overwrites the "canary" raising the excetpion handler's message.
Example QTL file attached, rename it with a .QTL extension

Nice work luigi good to see your still doing what you do best m8,Just wish i had more time to do what i love,But work and stuff at the minute just won't allow me any time it fucking suck's 6 day's a week.All work and no play.

Any way's ill try and test some software in the future keep up the good work m8.

I know what you mean, it's horrible when you do only work and you arrive at home that have no force and time to play with the PC