PT-2011-4564 · Mozilla+1 · Firefox+2

Claus Wahlers + 1 · Published 2011-11-08 · Updated 2017-09-19 · CVE-2011-3653

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 8.0 Thunderbird versions prior to 8.0

Description The issue arises from improper interaction with the GPU memory behavior of a certain driver for Intel integrated GPUs, allowing remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.

Recommendations For Mozilla Firefox versions prior to 8.0, update to version 8.0 or later to resolve the issue. For Thunderbird versions prior to 8.0, update to version 8.0 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-3653

Affected Products

Intel Integrated Gpus

Firefox

Thunderbird

References · 7

• http://mozilla.org/security/announce/2011/mfsa2011-51.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2011-51 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3653 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-3653 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13347 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=684882 · Note