CVE-2017-12802

The EBMLIntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12801

The CVE-2017-12801 issue affects libebml2 (UpdateDataSize in ebmlmaster.c) and is triggered by processing crafted MKV files. The vulnerability allows remote attackers to cause a denial-of-service, producing an assertion fault. Technical details from connected records show the flaw exists in libeb...

CVE-2017-12780

CVE-2017-12780 affects the ReadData function in ebmlstring.c of Libebml2 (up to 2012-08-26). A crafted MKV file can trigger an invalid free and crash the application, resulting in a denial of service. Connected sources corroborate this issue across multiple databases and mirror the same descripti...

CVE-2017-12783

The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12783

CVE-2017-12783 affects libebml2 (ReadDataFloat in ebmlnumber.c) up to version 2012-08-26. A crafted MKV file can trigger a denial-of-service (assert fault) remotely. The connected records confirm the vulnerable component and impact; no remediation details are provided in the supplied documents.

CVE-2017-12781

The EBMLBufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

CVE-2017-12779

The NodeGetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service Null pointer dereference and application crash via a crafted mkv file...

CVE-2017-12781

CVE-2017-12781 concerns the libebml2 parser. The vulnerability resides in the EBML_BufferToID function in ebmlelement.c, affecting libebml2 up to and including versions released before 2012-08-26. A crafted MKV file can trigger a denial of service via a NULL pointer dereference, potentially crash...

CVE-2017-12803

The CVE-2017-12803 issue affects mkclean 0.8.9, specifically the Node_ValidatePtr function in corec/corec/node/node.c. A crafted MKV file can trigger a remote denial of service (assert fault). Documents consistently describe the vulnerability without detailing a fixed version or patch availabilit...

CVE-2017-12801

The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

CVE-2017-12782

The CVE-2017-12782 entry concerns the ReadData function in ebmlmaster.c within libebml2 up to 2012-08-26, where a crafted MKV file can trigger a remote denial of service (assert fault). The connected documents confirm the vulnerable component and file, and describe the impact as a denial of servi...

libebml2 UpdateDataSize function denial of service vulnerability

libebml2 is a mkv file parsing library for analyzing or parsing mkv files for playback. A denial of service vulnerability exists in the UpdateDataSize function in ebmlmaster.c in libebml2 2012-08-26 and prior versions of Libebml2. With a specially crafted mkv file, a remote attacker can exploit...

libebml2 'EBML_IntegerValue' Function Denial of Service Vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'EBMLIntegerValue' function in the ebmlnumber.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a specially...

libebml2 ReadData Function Denial of Service Vulnerability

libebml2 is a mkv file parsing library for analyzing or parsing mkv files for playback. A denial of service vulnerability exists in the ReadData function in ebmlstring.c in Libebml2 2012-08-26 and earlier versions. With a specially crafted mkv file, a remote attacker can exploit this vulnerabilit...

libebml2 'EBML_BufferToID' function denial of service vulnerability

libebml2 is an open source EBML parser written in C . A security vulnerability exists in the 'EBMLBufferToID' function in the ebmlelement.c file in libebml2 2012-08-26 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference an...

mkclean Node_ValidatePtr Function Denial of Service Vulnerability

mkclean is a command line tool for cleaning and optimizing muxed Matroska .mkv / .mka / .mks / .mk3d and WebM .webm / .weba files. A denial of service vulnerability exists in the NodeValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9. Via a specially crafted mkv file, a remote...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...

Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35535)

Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists in the avformatlav57 module of the Storm Video 5 PC client when opening specific mkv files when copying strings, which can be exploited by an attacker to cause a denial of service or code...

Memory Corruption Vulnerability in Lovecraft Universal Player (CNVD-2017-35554)

Aiki Universal Player is a local video software that can also play image files and supports almost all major video formats. A memory corruption vulnerability exists in Aiki Universal Player when parsing the special envoy mkv file format, which can be exploited by attackers to cause a...

Null Pointer Reference Vulnerability in PPLive

PPLive is an online video player developed and operated by Shanghai Poly Media Technology Co. A null pointer reference vulnerability exists when PPLive plays or opens a specific mkv file online, which can be exploited by an attacker to conduct a denial of service attack...