CVE-2017-12780: Use After Free
The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted mkv file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12780?
CVE-2017-12780 is classified as a denial of service vulnerability, potentially allowing attackers to crash applications.
How do I fix CVE-2017-12780?
To remediate CVE-2017-12780, ensure that you update the affected software versions of libebml2, mkclean, and mkvalidator to their latest releases.
Which software is affected by CVE-2017-12780?
The vulnerability CVE-2017-12780 impacts libebml2 (up to and including 2012-08-26), mkclean version 0.8.9, and mkvalidator version 0.5.1.
What types of attacks does CVE-2017-12780 allow?
CVE-2017-12780 allows remote attackers to execute a denial of service attack by exploiting crafted mkv files.
Who should be concerned about CVE-2017-12780?
Developers and users of libebml2, mkclean, and mkvalidator should be concerned about CVE-2017-12780 due to the potential for application crashes.