CVE-2018-9411

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 19, 2024
Updated: Nov 22, 2024
CWE ID 787

Summary

CVE-2018-9411 is a vulnerability affecting ClearKeyCasPlugin.cpp in Microsoft's Media Platform. The issue involves a missing bounds check during the decryption process, which could result in an out-of-bounds write. Malicious actors can exploit this vulnerability to execute arbitrary code remotely, although user interaction is required for the exploit to take effect. This flaw poses a significant risk, particularly in environments where Media Platform is extensively used.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share