← Database

CVE-2010-1818

CRITICAL CVSS: 9.3 Published: 2010-08-31 Modified: 2026-06-16

Description

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

Affected Platforms

Apple Quicktime

Weakness Type

CWE-824

References