6.4

CVE-2011-2367

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 4.0
Mozilla ≫ Firefox Version 4.0 Update beta1
Mozilla ≫ Firefox Version 4.0 Update beta10
Mozilla ≫ Firefox Version 4.0 Update beta11
Mozilla ≫ Firefox Version 4.0 Update beta12
Mozilla ≫ Firefox Version 4.0 Update beta2
Mozilla ≫ Firefox Version 4.0 Update beta3
Mozilla ≫ Firefox Version 4.0 Update beta4
Mozilla ≫ Firefox Version 4.0 Update beta5
Mozilla ≫ Firefox Version 4.0 Update beta6
Mozilla ≫ Firefox Version 4.0 Update beta7
Mozilla ≫ Firefox Version 4.0 Update beta8
Mozilla ≫ Firefox Version 4.0 Update beta9
Mozilla ≫ Firefox Version 4.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.84% 0.768
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
http://www.mozilla.org/security/announce/2011/mfsa2011-26.html
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=656752
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302