CVE-2015-8791 - The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access

Back Back to CVE browser

MEDIUM

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access

Published Jan 29, 2016

4.3

MEDIUM

CVSS 3.0

EPSS 1.34%

Description

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (6)

http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
mailing-listx_refsource_MLISTVendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3538
vendor-advisoryx_refsource_DEBIAN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-8663
Advisory
https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
x_refsource_CONFIRMVendor Advisory
https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90
x_refsource_CONFIRM

Link	Providers	Tags
http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html		mailing-listx_refsource_MLISTVendor Advisory
http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html		vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2016/dsa-3538		vendor-advisoryx_refsource_DEBIAN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-8663		Advisory
https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog		x_refsource_CONFIRMVendor Advisory
https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90		x_refsource_CONFIRM