Test ID:	1.3.6.1.4.1.25623.1.0.813579
Category:	General
Title:	VLC Media Player MKV Files Arbitrary Code Execution Vulnerability (Windows)
Summary:	VLC media player is prone to an arbitrary code execution vulnerability.
Description:	Summary: VLC media player is prone to an arbitrary code execution vulnerability. Vulnerability Insight: The flaw exists due to an improper sanitization used by VLC media player against MKV files. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code in the context of the logged-in user and failed exploit attempts will likely result in denial of service conditions. Affected Software/OS: VideoLAN VLC media player versions through 2.2.8 on Windows Solution: Update to version 3.0.3 or above. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11529
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.