PT-2013-6059 · Google+2 · Google Chrome+4

Published

2013-11-12

·

Updated

2024-06-15

·

CVE-2013-6631

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions libjingle in WebRTC versions prior to 31.0.1650.48 Google Chrome versions prior to 31.0.1650.48
Description The issue is related to a use-after-free vulnerability in the Channel::SendRTCPPacket function. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in heap memory corruption, or possibly have other unspecified impacts. The vulnerability is triggered by vectors that cause the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.
Recommendations For libjingle in WebRTC versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later. For Google Chrome versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

ALT-PU-2013-1119
CVE-2013-6631
DSA-2799-1
MGASA-2013-0324
OPENSUSE-SU-2013_1776-1
OPENSUSE-SU-2013_1777-1
OPENSUSE-SU-2013_1861-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux
Google Chrome
Suse
Webrtc
Libjingle