CVE-2010-1818: Critical severity quicktime player vulnerability
Published Aug 31, 2010
·Updated
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer.
Affected Software
47 affected components
QuickTime Player=7.3.1
QuickTime Player=7.6.7
QuickTime Player=6.5.1
QuickTime Player=6.1.0
QuickTime Player=6.0.1
QuickTime Player=6.2.0
QuickTime Player=7.0.3
QuickTime Player=6.1.1
QuickTime Player=7.5.0
QuickTime Player=7.1.5
QuickTime Player=7.6.1
QuickTime Player=7.0.1
QuickTime Player=7.0
QuickTime Player=7.1.6
QuickTime Player=7.4.1
QuickTime Player=7.4.5
QuickTime Player=7.2.1
QuickTime Player=7.0.2
QuickTime Player=7.2.0
QuickTime Player=6.0.2
QuickTime Player=7.6.0
QuickTime Player=7.3.0
QuickTime Player=7.4
QuickTime Player=6.4.0
QuickTime Player=7.0.4
QuickTime Player=6.1
QuickTime Player=6.5
QuickTime Player=7.3.1.70
QuickTime Player=7.1.2
QuickTime Player=7.4.0
QuickTime Player=7.1
QuickTime Player=7.1.1
QuickTime Player=7.6.6
QuickTime Player=6.0.0
QuickTime Player=7.3
QuickTime Player=6.3.0
QuickTime Player=7.1.4
QuickTime Player=6.5.2
QuickTime Player=6.5.0
QuickTime Player=7.1.3
QuickTime Player=7.5.5
QuickTime Player=7.2
QuickTime Player=7.6.2
QuickTime Player=7.6.5
QuickTime Player=7.1.0
QuickTime Player=6.0
QuickTime Player=7.0.0
Event History
Aug 31, 2010
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1818?
CVE-2010-1818 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2010-1818?
To fix CVE-2010-1818, update Apple QuickTime to version 7.6.8 or later.
3
What versions of QuickTime are affected by CVE-2010-1818?
CVE-2010-1818 affects Apple QuickTime versions 6.x, 7.x before 7.6.8, and others.
4
Can CVE-2010-1818 be exploited remotely?
Yes, CVE-2010-1818 can be exploited remotely by attackers to execute arbitrary code.
5
What component is impacted by CVE-2010-1818?
CVE-2010-1818 impacts the IPersistPropertyBag2::Read function in QTPlugin.ocx.