CVE-2016-1514 in libEBML

Riassunto

di MITRE

A specially crafted unicode string in libebml master branch can cause an off-by-few read on the heap in unicode string parsing code in libebml. This issue can potentially be used for information leaks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 07/01/2016
• Moderazione: accettato
• Voce: VDB-95053
• CPE: pronto
• CWE: CWE-189 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1514
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1514
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1514/