openSUSE Security Update : libmatroska / mkvtoolnix (openSUSE-2018-1432)

This update for libmatroska, mkvtoolnix fixes the following issues : Security issue fixed : - CVE-2018-4022: Fixed use-after-free vulnerability that existed in the way MKV matroska file format was handled bsc1113709. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Security update for libmatroska, mkvtoolnix (low)

This update for libmatroska, mkvtoolnix fixes the following issues: Security issue fixed: - CVE-2018-4022: Fixed use-after-free vulnerability that existed in the way MKV matroska file format was handled bsc1113709...

[SECURITY] Fedora 29 Update: mkvtoolnix-28.2.0-1.fc29

Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...

[SECURITY] Fedora 28 Update: mkvtoolnix-28.2.0-1.fc28

Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...

[SECURITY] Fedora 27 Update: mkvtoolnix-28.2.0-1.fc27

Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...

DEBIAN-CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

Design/Logic Flaw

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

UBUNTU-CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

Vulnerability Spotlight: Talos-2018-0694 - MKVToolNix mkvinfo read_one_element Code Execution Vulnerability

Piotr Bania, Cory Duplantis and Martin Zeiser of Cisco Talos discovered this vulnerability. Overview Today, Cisco Talos is disclosing a vulnerability that we identified in the MKVToolNix mkvinfo utility that parses the Matroska file format video files .mkv files. MKVToolNix is a set of tools to...

MKVToolNix MKVINFO read_one_element code execution vulnerability

Summary A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user. Tested Versions MKVToolNix mkvinfo v25.0.0 ‘Prog Noir’ 64-bit Product URLs...

DEBIAN-CVE-2018-11529

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions...

UBUNTU-CVE-2018-11529

VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions...

CVE-2017-12781

The EBMLBufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

CVE-2017-12801

The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

libebml2 EBML_FindNextElement Function Denial of Service Vulnerability

libebml2 is a mkv file parsing library for analyzing or parsing mkv files for playback. A denial of service vulnerability exists in the EBMLFindNextElement function in libebml2 2012-08-26 and earlier ebmlmain.c. The vulnerability can be exploited to cause a denial of service null pointer...

libebml2 'ReadData' Function Denial of Service Vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'ReadData' function of the ebmlmaster.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a specially crafted...

libebml2 'ReadDataFloat' Function Denial of Service Vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'ReadDataFloat' function in the ebmlnumber.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a specially...