webrtc project webrtc vulnerabilities and exploits

(subscribe to this query)

5.3

CVSSv3

Pion WebRTC prior to 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the u...

Webrtc Project Webrtc

6.3

CVSSv3

Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox prior to 45.0 on Windows might allow remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown...

Webrtc Project Webrtc -Mozilla Firefox

5.5

CVSSv3

Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox prior to 45.0 on Windows might allow remote malicious users to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Mozilla Firefox Webrtc Project Webrtc -

8.1

CVSSv3

webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the ...

Webrtc Webrtc-native

8.8

CVSSv3

Heap buffer overflow in WebRTC in Google Chrome before 103.0.5060.114 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Webkitgtk Webkitgtk Wpewebkit Wpe Webkit Apple Mac Os X Apple Mac Os X 10.15.7 Apple Macos Apple Iphone Os Apple Ipados Apple Watchos Apple Tvos Webrtc Project Webrtc -

3 Articles

NA

Mozilla Firefox prior to 28.0 and SeaMonkey prior to 2.25 allow remote malicious users to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Server 11 Suse Linux Enterprise Software Development Kit 11 Mozilla Seamonkey Oracle Solaris 11.3 Mozilla Firefox Opensuse Project Opensuse 11.4 Opensuse Opensuse 13.1 Opensuse Project Opensuse 12.3

7.5

CVSSv3

In libexpat prior to 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Libexpat Project Libexpat Python Python

8.8

CVSSv3

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle...

Oracle Insurance Policy Administration J2ee 9.7.1 Oracle Insurance Policy Administration J2ee 10.0.1 Oracle Insurance Rules Palette 10.2.0 Oracle Insurance Rules Palette 10.2.2 Oracle Retail Integration Bus 15.0 Oracle Insurance Policy Administration J2ee 9.6.1 Oracle Insurance Rules Palette 10.0.1 Oracle Insurance Rules Palette 10.1.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Health Sciences Information Manager 3.0.1.0 Oracle Enterprise Manager Ops Center 12.1.4 Oracle Retail Order Broker Cloud Service 15.0 Oracle Documaker Oracle Insurance Policy Administration J2ee 10.2.2 Oracle Insurance Rules Palette 9.6.1 Oracle Insurance Rules Palette 9.7.1 Oracle Primavera P6 Enterprise Project Portfolio Management 8.4 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Health Sciences Information Manager 1.2.8.3 Oracle Health Sciences Information Manager 2.0.2.3 Oracle Retail Order Broker Cloud Service 5.1

6.1

CVSSv3

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

5.9

CVSSv3

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

74 Github repositories5 Articles

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook