CVE Feed

    Dashboard / CVE / CVE-2017-12781

    CVE-2017-12781

    The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.

    Published:Nov 9, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 9, 2017
    EPSS Score:0.00678
    CVSS Score:6.5

    Affected Products

    Vendor
    Matroska
    Product
    Libebml2
    Vendor
    Matroska
    Product
    Mkclean
    Vendor
    Matroska
    Product
    Mkvalidator

    Exploits

    http://seclists.org/fulldisclosure/2017/Nov/19https://github.com/Matroska-Org/foundation-source/issues/24http://seclists.org/fulldisclosure/2017/Nov/19https://github.com/Matroska-Org/foundation-source/issues/24

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-12780 (CVSS 6.5) — The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial…
    CVE-2017-12782 (CVSS 6.5) — The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial…
    CVE-2017-12783 (CVSS 6.5) — The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a d…
    CVE-2017-12801 (CVSS 6.5) — The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a …
    CVE-2017-12802 (CVSS 6.5) — The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause…
    CVE-2017-12800 (CVSS 6.5) — The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to caus…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High