[SECURITY] Fedora 28 Update: mkvtoolnix-28.2.0-1.fc28

Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...

[SECURITY] Fedora 27 Update: mkvtoolnix-28.2.0-1.fc27

Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...

Fedora 27 : mkvtoolnix (2018-8587111c5a)

Version 28.2.0 'The Awakening' 2018-10-25 Bug fixes - mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary cod...

Fedora Update for mkvtoolnix FEDORA-2018-8587111c5a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mkvtoolnix FEDORA-2018-317ecbb54f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

Design/Logic Flaw

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

CVE-2018-4022 is a use-after-free vulnerability in MKVToolNix MKVINFO (v25.0.0) related to Matroska file handling that could allow arbitrary code execution under the current user. The connected documents confirm the issue and show multiple Linux distro advisories (OpenSUSE, Fedora) noting a fix i...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

CVE-2018-4022

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

Vulnerability Spotlight: Talos-2018-0694 - MKVToolNix mkvinfo read_one_element Code Execution Vulnerability

Piotr Bania, Cory Duplantis and Martin Zeiser of Cisco Talos discovered this vulnerability. Overview Today, Cisco Talos is disclosing a vulnerability that we identified in the MKVToolNix mkvinfo utility that parses the Matroska file format video files .mkv files. MKVToolNix is a set of tools to...

CVE-2018-4022: Use After Free

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user...

PT-2018-16370

Name of the Vulnerable Software and Affected Versions MKVToolNix MKVINFO version 25.0.0 Description A use-after-free issue exists in the way MKVToolNix MKVINFO handles the MKV file format. This can be exploited by a specially crafted MKV file, potentially leading to arbitrary code execution in th...

MKVToolNix MKVINFO read_one_element code execution vulnerability

Summary A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV matroska file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user. Tested Versions MKVToolNix mkvinfo v25.0.0 ‘Prog Noir’ 64-bit Product URLs...

FreeBSD : mkvtoolnix -- code execution via specially crafted files (aeb7874e-8df1-11e6-a082-5404a68ad561)

Moritz Bunkus reports : most of the bugs fixed on 2016-09-06 and 2016-09-07 for issue 1780 are potentially exploitable. The scenario is arbitrary code execution with specially crafted files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

mkvtoolnix -- code execution via specially crafted files

Moritz Bunkus reports: most of the bugs fixed on 2016-09-06 and 2016-09-07 for issue 1780 are potentially exploitable. The scenario is arbitrary code execution with specially-crafted files...

CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...