CVE-2018-11529 : VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Published 2018-07-11 16:29:01

Updated 2019-03-21 20:10:25

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute codeDenial of service

Threat overview for CVE-2018-11529

Top countries where our scanners detected CVE-2018-11529

Top open port discovered on systems with this issue 80

IPs affected by CVE-2018-11529 458

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-11529!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-11529

EPSS FAQ

84.98%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-11529

VLC Media Player MKV Use After Free

Disclosure Date: 2018-05-24

First seen: 2020-04-26

exploit/windows/fileformat/vlc_mkv

This module exploits a use after free vulnerability in VideoLAN VLC =< 2.2.8. The vulnerability exists in the parsing of MKV files and affects both 32 bits and 64 bits. In order to exploit this, this module will generate two files: The first .mkv file co

More information

CVSS scores for CVE-2018-11529

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.0	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.1	5.9	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-11529

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-11529

https://www.debian.org/security/2018/dsa-4251

Debian -- Security Information -- DSA-4251-1 vlc
Third Party Advisory
http://seclists.org/fulldisclosure/2018/Jul/28

Full Disclosure: VLC media player 2.2.8 Arbitrary Code Execution PoC
Exploit;Mailing List;Third Party Advisory
http://www.securitytracker.com/id/1041311

VLC Media Player Use-After-Free Memory Error in Processing MKV Files Lets Remote Users Execute Arbitrary Code on the Target System - SecurityTracker
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/45626/

VLC Media Player - MKV Use-After-Free (Metasploit)
Exploit;Third Party Advisory;VDB Entry

Products affected by CVE-2018-11529

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Videolan » Vlc Media Player
Versions up to, including, (<=) 2.2.8
cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-11529