Spoofing attack on WebRTC permission prompt — Mozilla

Mozilla developer Ehsan Akhgari reported a spoofing attack where the permission prompt for a WebRTC session can appear to be from a different site than its actual originating site if a timed navigation occurs during the prompt generation. This allows an attacker to potentially gain access to the...

CVE-2014-1499

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC 1 camera or 2 microphone permission prompt by triggering navigation at a certain time during generation of this prompt...

CVE-2013-6631

Use-after-free vulnerability in the Channel::SendRTCPPacket function in voiceengine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...

CVE-2013-6631

Use-after-free vulnerability in the Channel::SendRTCPPacket function in voiceengine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...

Design/Logic Flaw

Use-after-free vulnerability in the Channel::SendRTCPPacket function in voiceengine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...

CVE-2013-6631

CVE-2013-6631 is a use-after-free in libjingle (WebRTC) within Channel::SendRTCPPacket, exploited via Google Chrome binaries prior to 31.0.1650.48 and affecting other Chromium-based products; leveraged vectors can cause heap memory corruption and potential denial of service. The OpenSUSE/Nessus n...

CVE-2013-6631

Use-after-free vulnerability in the Channel::SendRTCPPacket function in voiceengine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other...

CVE-2013-6631

Removed by vendor...

HTTP Client LAN IP Address Gather

This module retrieves a browser's network interface IP addresses using WebRTC. Module Options msf use auxiliary/gather/browser/lanipleak msf undefinedlanipleak show actions ...actions... msf undefinedlanipleak set ACTION msf undefinedlanipleak show options ...show and set options... msf...

CVE-2013-0843

content/renderer/media/webrtcaudiorenderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified othe...

Memory corruption

content/renderer/media/webrtcaudiorenderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified othe...

CVE-2013-0843

content/renderer/media/webrtcaudiorenderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified othe...

CVE-2013-0843

content/renderer/media/webrtcaudiorenderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified othe...

CVE-2013-0843

CVE-2013-0843 affects Google Chrome on macOS, where the renderer code in webrtc_audio_renderer.cc mishandles the buffer size for a 96 kHz WebRTC audio stream. This can lead to memory corruption and a resulting crash (DoS) or potentially other unspecified impact when processing audio from a web si...