PT-2020-5787
CVE-2020-6514
·
تاريخ النشر
2020-07-14
·
تاريخ التحديث
2025-09-29
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 84.0.4147.89
Description:
The issue is related to an inappropriate implementation in WebRTC, which can lead to heap corruption via a crafted SCTP stream. This can potentially be exploited by an attacker in a privileged network position. The vulnerability is also related to a buffer overflow in the WebRTC implementation, which can allow a remote attacker to compromise data integrity.
Recommendations:
For Google Chrome versions prior to 84.0.4147.89, update to version 84.0.4147.89 or later to resolve the issue. As a temporary workaround, consider restricting access to WebRTC functionality until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾