Логотип exploitDog
bind:CVE-2016-10600
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-10600

Количество 2

Количество 2

nvd логотип

CVE-2016-10600

больше 7 лет назад

webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

CVSS3: 8.1
EPSS: Низкий
github логотип

GHSA-7xvg-m3vx-2hhv

почти 7 лет назад

Downloads Resources over HTTP in webrtc-native

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2016-10600

webrtc-native uses WebRTC from chromium project. webrtc-native downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.

CVSS3: 8.1
1%
Низкий
больше 7 лет назад
github логотип
GHSA-7xvg-m3vx-2hhv

Downloads Resources over HTTP in webrtc-native

1%
Низкий
почти 7 лет назад

Уязвимостей на страницу