CVE-2017-12801: Input Validation
Published Nov 9, 2017
·Updated
The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
Affected Software
3 affected components
Matroska Libebml2<=2012-08-26
Matroska Mkclean=0.8.9
Matroska Mkvalidator=0.5.1
Event History
Nov 9, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12801?
CVE-2017-12801 is classified as a denial of service vulnerability.
2
How do I fix CVE-2017-12801?
To fix CVE-2017-12801, update libebml2 to a version released after August 26, 2012.
3
What impact does CVE-2017-12801 have on affected software?
CVE-2017-12801 can cause applications using the affected software to crash when processing a specially crafted MKV file.
4
Which software is affected by CVE-2017-12801?
CVE-2017-12801 affects libebml2, mkclean version 0.8.9, and mkvalidator version 0.5.1.
5
Can CVE-2017-12801 be exploited remotely?
Yes, CVE-2017-12801 can be exploited remotely by delivering a malicious MKV file to the targeted application.