CVE-2017-12782: Input Validation
Published Nov 9, 2017
·Updated
The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
Affected Software
3 affected components
Matroska Libebml2<=2012-08-26
Matroska Mkclean=0.8.9
Matroska Mkvalidator=0.5.1
Event History
Nov 9, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12782?
CVE-2017-12782 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2017-12782?
To fix CVE-2017-12782, update to the latest version of libebml2, mkclean, or mkvalidator that addresses this vulnerability.
3
What type of attack does CVE-2017-12782 facilitate?
CVE-2017-12782 facilitates denial of service attacks by allowing remote attackers to trigger an assert fault.
4
Which versions of libebml2 are affected by CVE-2017-12782?
Versions of libebml2 up to and including 2012-08-26 are affected by CVE-2017-12782.
5
Can CVE-2017-12782 be exploited through a crafted file?
Yes, CVE-2017-12782 can be exploited by using a specially crafted mkv file.