CVE-2010-1818

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.

La función IPersistPropertyBag2::Read en QTPlugin.ocx en Apple QuickTime 6.x, 7.x y otras versiones permite a atacantes remotos ejecutar código arbitrario a través del atributo _Marshaled_pUnk, lo que provoca que deserialice un puntero no confiable.