CVE-2013-6631

Name of the Vulnerable Software and Affected Versions libjingle in WebRTC versions prior to 31.0.1650.48 Google Chrome versions prior to 31.0.1650.48

Description The issue is related to a use-after-free vulnerability in the Channel::SendRTCPPacket function. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in heap memory corruption, or possibly have other unspecified impacts. The vulnerability is triggered by vectors that cause the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.

Recommendations For libjingle in WebRTC versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later. For Google Chrome versions prior to 31.0.1650.48, update to version 31.0.1650.48 or later.