CVE

Id
86066  
CVE No.
CVE-2015-8789  
Status
Candidate  
Description
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.  
Phase
Assigned (20160129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
757002 86066 CVE-2015-8789 MLIST:[matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes  View
757003 86066 CVE-2015-8789 URL:http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html  View
757004 86066 CVE-2015-8789 MISC:http://www.talosintelligence.com/reports/TALOS-2016-0037/  View
757005 86066 CVE-2015-8789 CONFIRM:https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog  View
757006 86066 CVE-2015-8789 CONFIRM:https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24  View
757007 86066 CVE-2015-8789 DEBIAN:DSA-3538  View
757008 86066 CVE-2015-8789 URL:http://www.debian.org/security/2016/dsa-3538  View
757009 86066 CVE-2015-8789 SUSE:openSUSE-SU-2016:0125  View
757010 86066 CVE-2015-8789 URL:http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html  View
757011 86066 CVE-2015-8789 BID:94924  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11734 JVNDB-2015-007054 ESET NOD32 のアーカイブサポートモジュールにおけるヒープベースのバッファオーバーフローの脆弱性 ESET NOD32 のアーカイブサポートモジュールには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-8841 86066 10 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007054.html  View