CVE-2015-8792: Buffer Overflow
The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8792?
CVE-2015-8792 is classified as a medium severity vulnerability due to potential information disclosure from process heap memory.
How do I fix CVE-2015-8792?
To fix CVE-2015-8792, upgrade to libMatroska version 1.4.4 or later, as this version addresses the vulnerability.
Who is affected by CVE-2015-8792?
CVE-2015-8792 affects users of libMatroska versions prior to 1.4.4 and certain versions of openSUSE.
What type of attack does CVE-2015-8792 enable?
CVE-2015-8792 enables context-dependent attackers to access sensitive information through crafted EBML lacing.
Is CVE-2015-8792 related to memory access?
Yes, CVE-2015-8792 is related to invalid memory access which can lead to information leaks.