high8.8Public exploit code
CVE-2018-16083
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebRTC - FEC Out-of-Bounds Read2018-09-21 · dos · multiple · Verified
Impact
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 69.0.3497.81 | |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Server | Version 6.0 |
| Redhat | Enterprise Linux Workstation | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105215
- https://access.redhat.com/errata/RHSA-2018:2666
- https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
- https://crbug.com/856823
- https://security.gentoo.org/glsa/201811-10
- https://www.exploit-db.com/exploits/45444/
- http://www.securityfocus.com/bid/105215
- https://access.redhat.com/errata/RHSA-2018:2666
- https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
- https://crbug.com/856823
- https://security.gentoo.org/glsa/201811-10
- https://www.exploit-db.com/exploits/45444/