PT-2010-3450 · Apple · Apple Quicktime+1

Hbelite

·

Published

2010-08-31

·

Updated

2017-09-27

·

CVE-2010-1818

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple QuickTime versions 6.x through 7.x before 7.6.8
Description The issue allows remote attackers to execute arbitrary code via the Marshaled pUnk attribute, which triggers unmarshalling of an untrusted pointer. This is caused by the QuickTime ActiveX control (QTPlugin.ocx) using a value passed in the Marshaled pUnk parameter as a pointer. Successful exploitation enables execution of arbitrary code.
Recommendations For Apple QuickTime versions 6.x through 7.x before 7.6.8, update to version 7.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the QTPlugin.ocx ActiveX control until a patch is applied. Avoid using the Marshaled pUnk parameter in affected API endpoints until the issue is resolved.

Exploit

Fix

RCE

Access of Uninitialized Pointer

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2010-1818
ZDI-10-168

Affected Products

Qtplugin.Ocx
Apple Quicktime