Swisscom TVMediaHelper 1.1.0.50 DLL Loader SwisscomTVMediaHelper.exe data processing

Summaryinfo

A vulnerability, which was classified as critical, has been found in Swisscom TVMediaHelper 1.1.0.50. This affects an unknown function in the library dwmapi.dll/PROPSYS.dll/cscapi.dll/SAMLIB.dll/netbios.dll/winhttp.dll/security.dll/ntmarta.dll/WindowsCodecs.dll/apphelp.dll of the file SwisscomTVMediaHelper.exe of the component DLL Loader. This manipulation causes data processing. This vulnerability appears as CVE-2018-6766. The attack requires local access. There is no available exploit.

Detailsinfo

A vulnerability has been found in Swisscom TVMediaHelper 1.1.0.50 and classified as critical. Affected by this vulnerability is an unknown functionality in the library dwmapi.dll/PROPSYS.dll/cscapi.dll/SAMLIB.dll/netbios.dll/winhttp.dll/security.dll/ntmarta.dll/WindowsCodecs.dll/apphelp.dll of the file SwisscomTVMediaHelper.exe of the component DLL Loader. The manipulation with an unknown input leads to a data processing vulnerability. The CWE definition for the vulnerability is CWE-19. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. The specific flaw exists within the handling of several DLLs (dwmapi.dll, PROPSYS.dll, cscapi.dll, SAMLIB.dll, netbios.dll, winhttp.dll, security.dll, ntmarta.dll, WindowsCodecs.dll, apphelp.dll) loaded by the SwisscomTVMediaHelper.exe process.

The bug was discovered 03/22/2018. The weakness was presented 03/27/2018 (Website). It is possible to read the advisory at swisscom.ch. This vulnerability is known as CVE-2018-6766 since 02/06/2018. Attacking locally is a requirement. The successful exploitation needs a single authentication. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 5 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Swisscom

Name

• TVMediaHelper

Version

• 1.1.0.50

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion