Remote code execution in Videolan VLC Media Player
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2018-11529 CVE-2018-11516 |
| CWE-ID | CWE-416 |
| Exploitation vector | Network |
| Public exploit | Vulnerability #1 is being exploited in the wild. |
| Vulnerable software Subscribe |
VLC Media Player Client/Desktop applications / Multimedia software |
| Vendor | VideoLAN |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Use-after-free error
EUVDB-ID: #VU13909
Risk: High
CVSSv3.1: 9.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2018-11529
CWE-ID:
CWE-416 - Use After Free
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to use-after-free error when handling malicious input. A remote unauthenticated attacker can trick the victim into loading a specially crafted MKV file, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate to version 3.0.3.
Vulnerable software versionsVLC Media Player: 2.0.0 - 2.2.8
External linkshttp://seclists.org/fulldisclosure/2018/Jul/28
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
2) Use-after-free error
EUVDB-ID: #VU13910
Risk: High
CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2018-11516
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to use-after-free error in the Demux() function in 'demux/avformat/demux.c when handling malicious input. A remote unauthenticated attacker can trick the victim into loading a specially crafted SWF file, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate to version 3.0.2.
Vulnerable software versionsVLC Media Player: 3.0.0 - 3.0.1
External linkshttp://www.videolan.org/security/sa1801.html
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
