CVE-2016-1639

Impact:
Moderate
Public Date:
2016-03-02
CWE:
CWE-416
Bugzilla:
1314224: CVE-2016-1639 chromium-browser: use-after-free in WebRTC

The MITRE CVE dictionary describes this issue as:

Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.

Find out more about CVE-2016-1639 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 4.3
Base Metrics AV:N/AC:M/Au:N/C:P/I:N/A:N
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux Supplementary (v. 6) (chromium-browser) RHSA-2016:0359 2016-03-07

External References

Last Modified

CVE description copyright © 2017, The MITRE Corporation