CVE-2010-1818: Apple Quicktime

High severity, CVSS 9.3. EPSS: 42.7% chance of exploitation in the next 30 days.

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

Affected products

• Apple Quicktime: version 6.0 only; version 6.0.0 only; version 6.0.1 only; version 6.0.2 only; version 6.1 only; version 6.1.0 only; …

Published 2010-08-31. Last modified 2026-06-16.