CVE-2010-1818

9.3
CVSS v2.0 Base Score
42.67%
MEDIUM RiskEPSS (99th percentile)

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

Published: 8/31/2010
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score (Exploitation Probability)

42.67%MEDIUM Exploitation Risk
99th percentile

This vulnerability has a 42.67% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.

CWE Classification

Advertisement