PT-2011-3952 · Mozilla+2 · Firefox+2

Publicado 2011-06-30 · Atualizado 2011-07-12 · CVE-2011-2603

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NVIDIA 9400M driver version 6.2.6

Description The issue allows remote attackers to cause a denial of service, resulting in a desktop hang, by visiting a crafted web page with Google Chrome or Mozilla Firefox. This is demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.

Recommendations For NVIDIA 9400M driver version 6.2.6, consider avoiding the use of Google Chrome or Mozilla Firefox to visit potentially crafted web pages until a fix is available. As a temporary workaround, restrict access to untrusted web pages to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-2603

Produtos afetados

Google Chrome

Firefox

Nvidia 9400M

Referências · 4

• 🔥 http://contextis.com/resources/blog/webgl · Exploit
• 🔥 http://contextis.com/resources/blog/webgl2 · Exploit
• http://securityfocus.com/bid/48319 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2603 · Nota de Segurança