CVE-2017-12801

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Nov/19Exploit, Mailing List, Third Party Advisory
https://github.com/Matroska-Org/foundation-source/issues/24Exploit, Third Party Advisory
http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Nov/19Exploit, Mailing List, Third Party Advisory
https://github.com/Matroska-Org/foundation-source/issues/24Exploit, Third Party Advisory

Timeline

Published: Nov 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-128026.5The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert f CVE-2017-128036.5The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault CVE-2017-128046.5The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exha CVE-2017-128057.5In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial CVE-2017-128067.5In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of CVE-2017-128096.5QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a d CVE-2017-12815.4IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to c CVE-2017-128106.1PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.CVE-2017-128116.1PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.CVE-2017-128126.1PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.CVE-2017-128136.1PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.CVE-2017-128149.8Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windo