NVD

Id
28839  
Name
CVE-2015-8789  
Description
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-01-29  
Modified Date
2016-12-02  
Seq
2015-8789  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151918 28839 CVE-2015-8789 [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes  View
151919 28839 CVE-2015-8789 openSUSE-SU-2016:0125  View
151920 28839 CVE-2015-8789 DSA-3538  View
151921 28839 CVE-2015-8789 http://www.talosintel.com/reports/TALOS-2016-0037/  View
151922 28839 CVE-2015-8789 https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog  View
151923 28839 CVE-2015-8789 https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11541 JVNDB-2015-006861 libEBML の EbmlMaster::Read 関数における脆弱性 libEBML の EbmlMaster::Read 関数には、解放済みメモリの使用 (Use-after-free) により、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8789 86014 CVE-2015-8789 28839 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006861.html 2015-10-20 2016-02-10 View