CVE-2017-12803

2017-11-1002:29:17

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

61.3%

JSON

The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.

References

packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html

seclists.org/fulldisclosure/2017/Nov/19

github.com/Matroska-Org/foundation-source/issues/24