CVE-2015-8790: Infoleak
Published Jan 29, 2016
·Updated
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
Affected Software
1 affected component
Matroska Libebml<=1.3.2
Event History
Jan 29, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8790?
CVE-2015-8790 has been classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2015-8790?
To mitigate CVE-2015-8790, users should upgrade to libEBML version 1.3.3 or later.
3
What types of vulnerabilities does CVE-2015-8790 exploit?
CVE-2015-8790 exploits an invalid memory access vulnerability that can be triggered by crafted UTF-8 strings.
4
Who is affected by CVE-2015-8790?
CVE-2015-8790 affects users of libEBML versions prior to 1.3.3.
5
What could happen if CVE-2015-8790 is exploited?
If exploited, CVE-2015-8790 could allow unauthorized users to read sensitive information from the process heap memory.