CVE-2018-11516 - The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file

Back Back to CVE browser

HIGH

The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file

Published May 28, 2018

8.8

HIGH

CVSS 3.1

EPSS 3.68%

Description

The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (5)

http://code610.blogspot.com/2018/05/make-free-vlc.html
x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/104293
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041312
vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
http://www.videolan.org/security/sa1801.html
x_refsource_CONFIRMThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3545
Advisory

Link	Providers	Tags
http://code610.blogspot.com/2018/05/make-free-vlc.html		x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/104293		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041312		vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
http://www.videolan.org/security/sa1801.html		x_refsource_CONFIRMThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3545		Advisory