Beveiligingsadvies

CVE-2013-6631

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-11-15 20:00:00
Laatst bijgewerkt 2024-08-06 17:46:22
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.