CVE:CVE-2017-12801
CNNVD:CNNVD-201708-588
libebml2是一款使用C语言编写的开源EBML解析器。
libebml2 2012-08-26及之前的版本中的ebmlmaster.c文件的‘UpdateDataSize’函数存在安全漏洞。远程攻击者可借助特制的mkv文件利用该漏洞造成拒绝服务。
solution:Upgrade matroska libebml2 to a higher version than 2012-08-26,and avoid the version (,2012-08-26]; Upgrade matroska mkclean to a higher version than 0.8.9,and avoid the version 0.8.9; Upgrade matroska mkvalidator to a higher version than 0.5.1,and avoid the version 0.5.1