Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-1818

high · 9.3

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

9.3
CVSS
42.7%
EPSS (exploit prob.)
99th
EPSS percentile
2010-08-31
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-824

Affected products

VendorProductAffected versions
applequicktime6.0
applequicktime6.0.0
applequicktime6.0.1
applequicktime6.0.2
applequicktime6.1
applequicktime6.1.0
applequicktime6.1.1
applequicktime6.2.0
applequicktime6.3.0
applequicktime6.4.0
applequicktime6.5
applequicktime6.5.0
applequicktime6.5.1
applequicktime6.5.2
applequicktime7.0
applequicktime7.0.0
applequicktime7.0.1
applequicktime7.0.2
applequicktime7.0.3
applequicktime7.0.4
applequicktime7.1
applequicktime7.1.0
applequicktime7.1.1
applequicktime7.1.2
applequicktime7.1.3
applequicktime7.1.4
applequicktime7.1.5
applequicktime7.1.6
applequicktime7.2
applequicktime7.2.0
applequicktime7.2.1
applequicktime7.3
applequicktime7.3.0
applequicktime7.3.1
applequicktime7.3.1.70
applequicktime7.4
applequicktime7.4.0
applequicktime7.4.1
applequicktime7.4.5
applequicktime7.5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1818