PT-2013-6059 · Google+2 · Google Chrome+4

Publicado

2013-11-12

·

Atualizado

2024-06-15

·

CVE-2013-6631

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libjingle in WebRTC versions prior to 31.0.1650.48 Google Chrome versions prior to 31.0.1650.48
Description The issue is related to a use-after-free vulnerability in the Channel::SendRTCPPacket function. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in heap memory corruption, or possibly have other unspecified impacts. The vulnerability is triggered by vectors that cause the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.
Recommendations For libjingle in WebRTC versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later. For Google Chrome versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

ALT-PU-2013-1119
CVE-2013-6631
DSA-2799-1
MGASA-2013-0324
OPENSUSE-SU-2013_1776-1
OPENSUSE-SU-2013_1777-1
OPENSUSE-SU-2013_1861-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux
Google Chrome
Suse
Webrtc
Libjingle