The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of the MediaStream component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in MediaStream...

Google Chrome MediaStream Memory Misreference Vulnerability

Google Chrome MediaStream is a web browser from Google, Inc. A memory misreference vulnerability exists in Google Chrome MediaStream, which is caused by a confusion in the program's instructions for releasing memory, and can be exploited to execute arbitrary code on the system or cause a denial o...

Chromium: CVE-2022-0798 Use after free in MediaStream

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12482 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to cause...

KLA12473 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 99 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 99.0.4844.51 for Windows,Mac and Linux contains a number of fixes and improvements -- a list of changes is available in the lo...

PT-2021-6342

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 99.0.4844.51 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the MediaStream component. This could allow a remote attacker to gain unauthorize...

Mozilla Firefox Security Advisory (MFSA2015-81) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

PT-2021-7896 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.140 Description: The issue is related to a use after free in the MediaStream component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could...

Security update for MozillaThunderbird (important)

MozillaThunderbird was updated to 38.7.0 to fix the following issues: Update to Thunderbird 38.7.0 boo969894 MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and history...

Updated firefox packages fix security vulnerabilities

Updated nss and firefox packages fix security vulnerabilities: Security researcher SkyLined reported a use-after-free issue in how audio is handled through the Web Audio API during MediaStream playback through interactions with the Web Audio API. This results in a potentially exploitable crash...

MGASA-2015-0414 Updated iceape/sqlite3 packages fix security vulnerabilities

Updated iceape packages fix security issues. The sqlite3 package has been updated as well since the new iceape version requires the SQLITEENABLEDBSTATVTAB feature to be enabled in sqlite. This sqlite3 update also enables ICU support, fixing bug 16814 . Use-after-free vulnerability in the...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of the MediaStream component in the Firefox browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

openSUSE Security Update : MozillaFirefox (openSUSE-2015-548)

update to Firefox 40.0 bnc940806 - Added protection against unwanted software downloads - Suggested Tiles show sites of interest, based on categories from your recent browsing history - Hello allows adding a link to conversations to provide context on what the conversation will be about - New...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

Design/Logic Flaw

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

CVE-2015-4477

CVE-2015-4477 is a use-after-free vulnerability in Firefox’s MediaStream playback, triggered by the Web Audio API during audio processing. The issue allows remote attackers to potentially execute arbitrary code and is associated with Firefox versions before 40.0. Remediation is to update to Firef...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

CVE-2015-4477: Undefined Security Weakness

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...