chromium-browser: Use after free in WebRTC

A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

Google Chrome WebRTC Memory Misreference Vulnerability (CNVD-2018-20753)

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A memory misreference vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. No details of the vulnerability are provided at...

Google Chrome WebRTC Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A buffer overflow vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. An attacker can exploit the vulnerability to obtain...

chromium-browser: Type confusion in WebRTC

Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

Google Chrome memory misreference vulnerability (CNVD-2018-17042)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in WebRTC in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

Google WebRTC VP9 Out-of-Bounds Memory Access Vulnerability

WebRTC, whose name derives from the acronym Web Real-Time Communication, is a technology that supports real-time voice or video conversations in web browsers. A security vulnerability exists in Google WebRTC VP9. An attacker can exploit the vulnerability to cause Chrome to crash. The vulnerabilit...

chromium-browser: Out of bounds memory access in WebRTC

Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

chromium-browser: Use of uninitialized memory in WebRTC

Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file...

DuckDuckGo Private IP Address Disclosure Vulnerability

DuckDuckGo is an extension for use in browsers. It is used to access the web anonymously.WebRTC component is a component used in it to support real-time voice conversations or video conversations in the browser. A security vulnerability exists in the WebRTC component in DuckDuckGo version 4.2.0. ...

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

EChat Server 3.1 - CHAT.ghp Buffer Overflow

EChat Server 3.1 - CHAT.ghp Buffer Overflow Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in...

EChat Server 3.1 - 'CHAT.ghp' Buffer Overflow

Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in adenial-of-service condition. Program description...

Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.6 and Firefox 58...

UBUNTU-CVE-2017-5068

Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page...

Using WebSocket as your Real Time Protocol? Wallam got you covered.

In the beginning there was http 1 or 2, web pages were static and did not do much beyond displaying static text and images. Life has changed since… Web applications discovered that bi-directional communication between the browser and the web server is essential. Of course, http protocol, with it’...

chromium-browser: out of bounds memory access in webrtc

WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2016-5258

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...

Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04339)

Pidgin is a cross-platform real-time communication client. A buffer overflow vulnerability exists in the MXIT protocol processing of Pidgin version 2.10.11, which can be exploited by an attacker to cause an out-of-bounds read with the help of specially crafted MXIT data...

Vulnerability of Firefox ESR and Firefox browsers, allowing attackers to execute arbitrary code

The vulnerability of the mozilla::DataChannelConnection::Close function in Firefox ESR and Firefox lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by improperly using WebRTC...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the GetStaticInstance function in the Firefox WebRTC browser implementation exists due to insufficient checking of resource state when resources can be used concurrently. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failu...