CVE-2018-11529
Description
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.
Risk Information
Base Score
8.0
MODERATE
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
73.818
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2017-17670,CVE-2018-11529 are affected in VLC Media Player (MSI) (x64) 2.2.8 | Windows |
| Vulnerabilities CVE-2017-17670,CVE-2018-11529 are affected in VLC media player (MSI) 2.2.8 | Windows |
| vlc security update(DSA-4251-1) vlc_3.0.3-1-0+deb9u1_i386.deb | Linux |
| vlc security update(DSA-4251-1) vlc_3.0.3-1-0+deb9u1_amd64.deb | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-334048 | VLC media player (MSI) (x64) (3.0.20.0) |
| PATCH-334050 | VLC media player (MSI) (3.0.20.0) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234