CVE-2018-11529

HIGH

Debian Linux < 2.2.8 - Use After Free

Title source: rule

Description

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubylocalwindows

https://www.exploit-db.com/exploits/45626

View Code ZIP pw:eip

metasploit WORKING POC GREAT

by Eugene Ng - GovTech, Winston Ho - GovTech · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/vlc_mkv.rb

View Code ZIP pw:eip

References (4)

[Exploit, Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2018/Jul/28

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1041311

[Third Party Advisory] https://www.debian.org/security/2018/dsa-4251

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/45626/

Scores

CVSS v3 8.0

EPSS 0.7382

EPSS Percentile 98.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (2)

debian/debian_linux 9.0

videolan/vlc_media_player < 2.2.8

Published Jul 11, 2018

Tracked Since Feb 18, 2026