CVE-2018-1000524

Name: CVE-2018-1000524
Creator: NVD / NIST
Published: 2018-06-26T16:29:01.507+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.21%

Last modified Jun 17, 2026

CVE-2018-1000524 is a vulnerability of currently unknown severity. miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote denial of service. This attack appear to be exploitable via the victim must load a specially-crafted map which calls SetLayerSize in its entry script. EPSS estimates a 1.21% chance of exploitation in the next 30 days.

Description

miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote denial of service. This attack appear to be exploitable via the victim must load a specially-crafted map which calls SetLayerSize in its entry script. This vulnerability appears to have been fixed in 5.0.3, 5.1.5, 5.2.10 and later.

Metrics

EPSS Probability

1.21%

64.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-190

Affected Software

Vendor	Product	Versions
Spheredev	Minisphere	<= 5.2.9

References

https://github.com/fatcerberus/minisphere/commit/252c1ca184cb38e1acb917aa0e451c5f08519996Exploit, Patch, Third Party Advisory
https://github.com/fatcerberus/minisphere/pull/268Third Party Advisory
https://github.com/fatcerberus/minisphere/commit/252c1ca184cb38e1acb917aa0e451c5f08519996Exploit, Patch, Third Party Advisory
https://github.com/fatcerberus/minisphere/pull/268Third Party Advisory

Timeline

Published: Jun 26, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-1000524?

How severe is CVE-2018-1000524?

Severity scoring for CVE-2018-1000524 is pending analysis. The EPSS model estimates a 1.21% probability of exploitation in the next 30 days.

How do I fix CVE-2018-1000524?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-1000524?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST