CVE

Id
66578  
CVE No.
CVE-2013-6631  
Status
Candidate  
Description
Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.  
Phase
Assigned (20131105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645938 66578 CVE-2013-6631 CONFIRM:http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html  View
645939 66578 CVE-2013-6631 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=296804  View
645940 66578 CVE-2013-6631 CONFIRM:https://code.google.com/p/webrtc/source/detail?r=4827  View
645941 66578 CVE-2013-6631 CONFIRM:https://webrtc-codereview.appspot.com/2275008  View
645942 66578 CVE-2013-6631 DEBIAN:DSA-2799  View
645943 66578 CVE-2013-6631 URL:http://www.debian.org/security/2013/dsa-2799  View
645944 66578 CVE-2013-6631 SUSE:openSUSE-SU-2013:1776  View
645945 66578 CVE-2013-6631 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html  View
645946 66578 CVE-2013-6631 SUSE:openSUSE-SU-2013:1777  View
645947 66578 CVE-2013-6631 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html  View
645948 66578 CVE-2013-6631 SUSE:openSUSE-SU-2013:1861  View
645949 66578 CVE-2013-6631 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html  View
645950 66578 CVE-2013-6631 SUSE:openSUSE-SU-2014:0065  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23800 JVNDB-2013-005375 Google Chrome で使用される Blink の core/loader/FrameLoader.cpp におけるアドレスバーを偽装される脆弱性 Google Chrome で使用される Blink の core/loader/FrameLoader.cpp の FrameLoader::notifyIfInitialDocumentAccessed 関数は、モーダルダイアログの表示中に空のドキュメントに対して誤ったチェックを行うため、アドレスバーを偽装される脆弱性が存在します。 CVE-2013-6636 66578 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005375.html  View