ID:7228 - Exploit for Heap-based buffer overflow in Google Chromium - CVE-2021-37979

 
Main Vulnerability Database Exploits ID:7228 - Exploit for Heap-based buffer overflow in Google Chromium - CVE-2021-37979

ID:7228 - Exploit for Heap-based buffer overflow in Google Chromium - CVE-2021-37979

Published: January 10, 2022


Vulnerability identifier: #VU57130
Vulnerability risk: High
CVE-ID: CVE-2021-37979
CWE-ID: CWE-122
Exploitation vector: Remote access
Vulnerable software:
Google Chromium

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted HTML content in WebRTC. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger a heap-based buffer overflow and execute arbitrary code on the target system.


Remediation

Update to version 94.0.4606.81.