The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libebml2 | Matroska | * | 2012-08-26 (including) |
| Mkclean | Matroska | 0.8.9 (including) | 0.8.9 (including) |
| Mkvalidator | Matroska | 0.5.1 (including) | 0.5.1 (including) |
| Libebml | Ubuntu | artful | * |
| Libebml | Ubuntu | zesty | * |