CVE-2010-1818: Critical severity QuickTime Player vulnerability
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the MarshaledpUnk attribute, which triggers unmarshalling of an untrusted pointer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple QuickTimeto a version that resolves this vulnerability.Fixed in 7.6.8
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1818?
CVE-2010-1818 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2010-1818?
To fix CVE-2010-1818, update Apple QuickTime to version 7.6.8 or later.
What versions of QuickTime are affected by CVE-2010-1818?
CVE-2010-1818 affects Apple QuickTime versions 6.x, 7.x before 7.6.8, and others.
Can CVE-2010-1818 be exploited remotely?
Yes, CVE-2010-1818 can be exploited remotely by attackers to execute arbitrary code.
What component is impacted by CVE-2010-1818?
CVE-2010-1818 impacts the IPersistPropertyBag2::Read function in QTPlugin.ocx.