CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

CVE-2015-8792: Improper Restriction of Operations within the Bounds of a Memory Buffer

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...

PT-2016-4022

Name of the Vulnerable Software and Affected Versions libMatroska versions prior to 1.4.4 Description The issue allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access. This is due to a problem in...

PT-2016-4019

Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3 Description A use-after-free issue exists in the EbmlMaster::Read function, allowing context-dependent attackers to have an unspecified impact. This can be achieved by providing a "deeply nested element with...

CVE-2015-8789: Undefined Security Weakness

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

CVE-2008-5236

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted EBML element length processed by the parseblockgroup function in demuxmatroska.c; 2 a certain combination of sps, w,...

Debian DSA-1586-1 : xine-lib - multiple vulnerabilities

Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...

Multiple heap overflows in xine-lib 1.1.11

Luigi Auriemma Application: xine-lib http://xinehq.de Versions: = 1.1.11 Platforms: Linux, BSD, Solaris, Irix, MacOSX, Windows and others Bugs: A heap-overflow in demuxflv B heap-overflow in demuxqt C heap-overflow in demuxreal D heap-overflow in demuxwc3movie E heap-overflow in ebml F...