The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:matroska:libebml2:*:*:*:*:*:*:*:*"
],
"vendor_product": "matroska:libebml2",
"extracted_events": [
{
"last_affected": "2012-08-26"
}
],
"source": "CPE_RANGE"
}
]
}{
"cpe": [
"cpe:2.3:a:matroska:mkclean:0.8.9:*:*:*:*:*:*:*",
"cpe:2.3:a:matroska:mkvalidator:0.5.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0.8.9"
},
{
"last_affected": "0.8.9"
},
{
"introduced": "0.5.1"
},
{
"last_affected": "0.5.1"
}
],
"source": "CPE_STRING"
}