Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-12783

Description

The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file.

POC

Reference

- http://packetstormsecurity.com/files/144902/mkvalidator-0.5.1-Denial-Of-Service.html

- http://seclists.org/fulldisclosure/2017/Nov/19

- https://github.com/Matroska-Org/foundation-source/issues/24

Github

No PoCs found on GitHub currently.