The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.
AV:N/AC:M/Au:N/C:C/I:C/A:C
This vulnerability has a 42.67% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.