PT-2011-4564 · Mozilla+1 · Firefox+2

Claus Wahlers + 1 · Publicado 2011-11-08 · Atualizado 2017-09-19 · CVE-2011-3653

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 8.0 Thunderbird versions prior to 8.0

Description The issue arises from improper interaction with the GPU memory behavior of a certain driver for Intel integrated GPUs, allowing remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.

Recommendations For Mozilla Firefox versions prior to 8.0, update to version 8.0 or later to resolve the issue. For Thunderbird versions prior to 8.0, update to version 8.0 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-3653

Produtos afetados

Intel Integrated Gpus

Firefox

Thunderbird

Referências · 7

• http://mozilla.org/security/announce/2011/mfsa2011-51.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html · Aviso do Fabricante
• https://mozilla.org/en-US/security/advisories/mfsa2011-51 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3653 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-3653 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13347 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=684882 · Nota