CVE-2019-13722 - Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code

Back Back to CVE browser

MEDIUM

Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code

Published Jan 14, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.00%

Description

Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

Vendor Google Product Chrome Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <79.0.3945.79

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Chrome

n/a

Version	Status	Constraints
unspecified	affected	<79.0.3945.79

Red Hat Enterprise Linux 5

firefox

Not affected
Red Hat Enterprise Linux 5

thunderbird

Out of support scope
Red Hat Enterprise Linux 6

firefox

Not affected
Red Hat Enterprise Linux 6

thunderbird

Not affected
Red Hat Enterprise Linux 7

firefox

Not affected
Red Hat Enterprise Linux 7

thunderbird

Not affected
Red Hat Enterprise Linux 8

firefox

Not affected
Red Hat Enterprise Linux 8

thunderbird

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	firefox	Not affected	n/a
Red Hat Enterprise Linux 5	thunderbird	Out of support scope	n/a
Red Hat Enterprise Linux 6	firefox	Not affected	n/a
Red Hat Enterprise Linux 6	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 7	firefox	Not affected	n/a
Red Hat Enterprise Linux 7	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 8	firefox	Not affected	n/a
Red Hat Enterprise Linux 8	thunderbird	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-628

CWE-787

Out-of-bounds Write

References (8)

https://access.redhat.com/security/cve/CVE-2019-13722
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1779432
Issue Tracking
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html
x_refsource_MISC
https://crbug.com/1025089
x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2019-13722
https://www.cve.org/CVERecord?id=CVE-2019-13722
https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/
Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/#CVE-2019-13722

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-13722		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1779432		Issue Tracking
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html		x_refsource_MISC
https://crbug.com/1025089		x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2019-13722
https://www.cve.org/CVERecord?id=CVE-2019-13722
https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/		Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2019-37/#CVE-2019-13722