EChat Server 3.1 - CHAT.ghp Buffer Overflow

EChat Server 3.1 - CHAT.ghp Buffer Overflow Exploit Author: Juan Sacco Vulnerability found using Exploit Pack v10 - http://exploitpack.com Impact: An attacker could exploit this vulnerability to execute arbitrary code in the context of the application. Failed exploit attempts will result in...

Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.6 and Firefox 58...

UBUNTU-CVE-2017-5068

Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page...

Using WebSocket as your Real Time Protocol? Wallam got you covered.

In the beginning there was http 1 or 2, web pages were static and did not do much beyond displaying static text and images. Life has changed since… Web applications discovered that bi-directional communication between the browser and the web server is essential. Of course, http protocol, with it’...

chromium-browser: out of bounds memory access in webrtc

WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2016-5258

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session...

Pidgin MXIT Protocol Buffer Overflow Vulnerability (CNVD-2016-04339)

Pidgin is a cross-platform real-time communication client. A buffer overflow vulnerability exists in the MXIT protocol processing of Pidgin version 2.10.11, which can be exploited by an attacker to cause an out-of-bounds read with the help of specially crafted MXIT data...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the GetStaticInstance function in the Firefox WebRTC browser implementation exists due to insufficient checking of resource state when resources can be used concurrently. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failu...

Vulnerability of Firefox ESR and Firefox browsers, allowing attackers to execute arbitrary code

The vulnerability of the mozilla::DataChannelConnection::Close function in Firefox ESR and Firefox lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by improperly using WebRTC...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc implementation of the WebRTC Audio Private API in Google Chrome Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause servi...

Mozilla Firefox WebRTC Conditional Competition Vulnerability

Firefox is an open source web browser. A competitive condition vulnerability in GetStaticInstance in Mozilla Firefox WebRTC allows remote attackers to exploit the vulnerability to construct a malicious WEB page, which can be tricked into parsing by the user and can crash the application...

CVE-2016-1639

Use-after-free vulnerability in browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging...

Firefox 41 integrates Free Built-in Instant Messaging and Video Chat to Your Browser

Mozilla launches Voice and Video Connect with the release of Official Firefox 41.0 Release. After significant improvements done in the Firefox Nightly experimental build of version Firefox 41.0, the stable release has a lot to offer. How would it be experiencing a seamless communication – video a...

WebRTC Found Leaking Local IP Addresses

A recently publicized hole in WebRTC, a protocol for web communication, is revealing the local IP addresses of users, even those who go to extra lengths to hide theirs by using a virtual private network. Daniel Roesler, a San Francisco-based researcher who’s dabbled in encryption, posted a...

USN-2373-1 thunderbird vulnerabilities

Bobby Holley, Christian Holler, David Bolter, Byron Campen and Jon Coppeard discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service vi...

UBUNTU-CVE-2014-1585

The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive informati...

IBM Sametime Connect信息泄露漏洞(CVE-2014-0890)

BUGTRAQ ID: 65937 CVECAN ID: CVE-2014-0890 IBM& Sametime 产品将实时社交通信功能集成到业务环境中，通过即时消息传递、在线会议、语音、视频和数据，实现统一的用户体验。 IBM Sametime Connect 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, 9.0.0.1版本在实现上存在信息泄露漏洞，如果用户将特殊的日志标记设置为高级并使用音频、视频聊天，则该用户的密码将以明文或编码（未加密）形式记录。攻击者可利用此漏洞获取敏感信息。 0 IBM Sametime Connect 9.0.0...