Lucene search
MitreCVELIST:CVE-2015-8790HistoryJan 29, 2016 - 7:00 p.m.
CVE-2015-8790
2016-01-2919:00:00
mitre
www.cve.org
5
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
References
lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
www.debian.org/security/2016/dsa-3538
www.securityfocus.com/bid/85307
www.securityfocus.com/bid/95124
www.talosintelligence.com/reports/TALOS-2016-0036/
github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b
Related
talos
talos
Matroska libebml EbmlUnicodeString Heap Information Leak
2016-01-28 00:00:00
debiancve
debiancve
CVE-2015-8790
2016-01-29 19:59:02
nvd
nvd
CVE-2015-8790
2016-01-29 19:59:02
CVE-2016-1514
2017-01-06 21:59:00
prion
prion
Design/Logic Flaw
2016-01-29 19:59:00
Design/Logic Flaw
2017-01-06 21:59:00
ubuntucve
ubuntucve
CVE-2015-8790
2016-01-29 00:00:00
cve
cve
CVE-2015-8790
2016-01-29 19:59:02
CVE-2016-1514
2017-01-06 21:59:00
debian
debian
[SECURITY] [DLA 438-1] libebml security update
2016-02-28 17:36:43
[SECURITY] [DSA 3538-1] libebml security update
2016-03-31 10:55:43
[SECURITY] [DSA 3538-1] libebml security update
2016-03-31 10:55:43
nessus
nessus
Debian DLA-438-1 : libebml security update
2016-02-29 00:00:00
FreeBSD : libebml -- multiple vulnerabilities (a130bd8c-eafe-11e6-9ac1-a4badb2f4699)
2017-02-06 00:00:00
Debian DSA-3538-1 : libebml - security update
2016-04-01 00:00:00
osv
osv
libebml - security update
2016-02-28 00:00:00
libebml - security update
2016-03-31 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-438-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3538-1 (libebml - security update)
2016-03-31 00:00:00
Debian: Security Advisory (DSA-3538-1)
2016-03-30 00:00:00
freebsd
freebsd
libebml -- multiple vulnerabilities
2015-10-20 00:00:00