PT-2010-3450 · Apple · Apple Quicktime+1
Hbelite
·
Published
2010-08-31
·
Updated
2017-09-27
·
CVE-2010-1818
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple QuickTime versions 6.x through 7.x before 7.6.8
Description
The issue allows remote attackers to execute arbitrary code via the
Marshaled pUnk attribute, which triggers unmarshalling of an untrusted pointer. This is caused by the QuickTime ActiveX control (QTPlugin.ocx) using a value passed in the Marshaled pUnk parameter as a pointer. Successful exploitation enables execution of arbitrary code.Recommendations
For Apple QuickTime versions 6.x through 7.x before 7.6.8, update to version 7.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the QTPlugin.ocx ActiveX control until a patch is applied. Avoid using the
Marshaled pUnk parameter in affected API endpoints until the issue is resolved.Exploit
Fix
RCE
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qtplugin.Ocx
Apple Quicktime