173 matches found
CVE-2015-8789
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...
CVE-2015-8790: Exposure of Sensitive Information to an Unauthorized Actor
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access...
PT-2016-4020
Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3 Description The issue allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access. This occurs in the...
CVE-2015-8791: Exposure of Sensitive Information to an Unauthorized Actor
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access...
PT-2016-4021
Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3 Description The issue allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access. This occurs in...
CVE-2015-8789: Undefined Security Weakness
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...
PT-2016-4019
Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3 Description A use-after-free issue exists in the EbmlMaster::Read function, allowing context-dependent attackers to have an unspecified impact. This can be achieved by providing a "deeply nested element with...
Matroska libebml EbmlUnicodeString Heap Information Leak
Talos Vulnerability Report TALOS-2016-0036 Matroska libebml EbmlUnicodeString Heap Information Leak January 28, 2016 CVE Number CVE-2015-8790 Description A specially crafted unicode string can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potential...
openSUSE Security Update : libebml / libmatroska (openSUSE-2016-37)
This update for libebml, libmatroska fixes the following security issues : Vulnerabilities fixed in libebml : - Cisco TALOS-CAN-0036: Invalid memory access when reading from a UTF-8 string resulted in a heap information leak bsc961031. - Cisco TALOS-CAN-0037: Deeply nested elements with infinite...
MGASA-2015-0430 Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
PT-2015-7935
Name of the Vulnerable Software and Affected Versions libebml versions prior to 1.3.3 libmatroska versions prior to 1.4.4 Description The issue arises from two problems in libebml. Firstly, when the parser encounters a deeply nested element with an infinite size, it fails to propagate the followi...
