The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote…

Description

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

Scores

EPSS (exploitation in 30 days)

42.7% · top 1.3% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a
• CWE-824 (opens in a new tab)All about CWE-824 and its CVEs

Affected products

• n/a

  • affected n/a

References (6)

• oval:org.mitre.oval:def:7523 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• https://www.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/apple_quicktime_marshaled_punk.rb (opens in a new tab)x_refsource_MISCx_transferred
• http://reversemode.com/index.php?option=com_content&task=view&id=69&Itemid=1 (opens in a new tab)x_refsource_MISCx_transferred
• http://threatpost.com/en_us/blogs/new-remote-flaw-apple-quicktime-bypasses-aslr-and-dep-083010 (opens in a new tab)x_refsource_MISCx_transferred
• http://support.apple.com/kb/ht4339 (opens in a new tab)x_refsource_CONFIRMx_transferred
• APPLE-SA-2010-09-15-1 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2010-1818](https://trackcve.app/badge/CVE-2010-1818.svg)](https://trackcve.app/cve/CVE-2010-1818)

Record last updated 7 Aug 2024, 01:35 UTC.