CVE-2015-8789: Use After Free
Published Jan 29, 2016
·Updated
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.
Affected Software
1 affected component
Matroska Libebml<=1.3.2
Event History
Jan 29, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8789?
CVE-2015-8789 is categorized as a moderate severity vulnerability due to its potential impact through undefined exploitation.
2
How do I fix CVE-2015-8789?
To mitigate CVE-2015-8789, upgrade libEBML to version 1.3.3 or later.
3
What types of attacks does CVE-2015-8789 enable?
CVE-2015-8789 allows context-dependent attackers to exploit the use-after-free vulnerability in EBML documents.
4
Which versions of libEBML are affected by CVE-2015-8789?
CVE-2015-8789 affects all versions of libEBML prior to 1.3.3.
5
Where can I find more information about CVE-2015-8789?
Further details regarding CVE-2015-8789 can typically be found in security advisories related to libEBML.