CVE-2017-12802: Input Validation
Published Nov 9, 2017
·Updated
The EBMLIntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
Affected Software
3 affected components
Matroska Libebml2<=2012-08-26
Matroska Mkclean=0.8.9
Matroska Mkvalidator=0.5.1
Event History
Nov 9, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12802?
CVE-2017-12802 has a severity rating that indicates a potential denial of service vulnerability.
2
How can I fix CVE-2017-12802?
To fix CVE-2017-12802, update libebml2 and related software to versions released after August 26, 2012.
3
Which versions of libebml2 are affected by CVE-2017-12802?
CVE-2017-12802 affects libebml2 versions up to and including 2012-08-26.
4
What impact does CVE-2017-12802 have on software?
CVE-2017-12802 can cause applications using the affected libraries to crash, leading to a denial of service.
5
Which applications are known to be affected by CVE-2017-12802?
Applications such as mkclean 0.8.9 and mkvalidator 0.5.1 are known to be affected by CVE-2017-12802.