The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and application crash) via a crafted mkv file.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libebml2 | Matroska | * | 2012-08-26 (including) |
| Mkclean | Matroska | 0.8.9 (including) | 0.8.9 (including) |
| Mkvalidator | Matroska | 0.5.1 (including) | 0.5.1 (including) |