The favored media taking part in software program VLC was just lately discovered to have a vital safety flaw. Upon exploit, this flaw can enable potential attackers to execute distant code and conduct different malicious actions. The distributors are presently engaged on a repair for this VLC Media Participant vulnerability.
VLC Media Participant Vulnerability
Researchers from German cybersecurity agency CERT-Bund have noticed a vital safety flaw in VLC Media Participant. This flaw, upon exploit, can result in severe penalties.
As acknowledged of their advisory [translated],
A distant, nameless attacker can exploit a vulnerability in VLC to execute arbitrary code, create a denial of service state, disclose data, or manipulate information.
The vulnerability has acquired the CVE quantity CVE-2019-13615 with a CVSS v3.Zero base rating of 9.8. This vital safety flaw is mainly a heap-based buffer over-read affecting the software program. As per its evaluation description,
VideoLAN VLC media participant 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t::FreeUnused() in modules/demux/mkv/demux.cpp when referred to as from mkv::Open in modules/demux/mkv/mkv.cpp.
This safety flaw allegedly impacts the software program throughout all main working techniques, together with Home windows, Linux, and Unix.
Patch On The Means
VLC has confirmed the presence of the safety flaw. The distributors are presently working to repair this VLC Media Participant vulnerability. Nonetheless, till the time of writing this text, the work standing merely reveals a 60% progress. Meaning the agency continues to be within the means of growing a patch.
The standing of the repair for this flaw could be tracked by way of the ticket #22474.
For now, there appears no potential mitigation or workaround to remain secure from potential exploit. Subsequently, the customers of this in style media participant ought to keep away from utilizing this instrument in the intervening time.
VLC Media Participant is in style open-source software program. Owing to its seamless compatibility with main working techniques, and the help for many media information varieties, it’s well-known among the many public. Presently, the website of the software program reveals over Three billion downloads.
Take your time to touch upon this text.
