5

CVE-2011-2986

Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version4.0
Mozilla ≫ Firefox Version4.0 Updatebeta1
Mozilla ≫ Firefox Version4.0 Updatebeta10
Mozilla ≫ Firefox Version4.0 Updatebeta11
Mozilla ≫ Firefox Version4.0 Updatebeta12
Mozilla ≫ Firefox Version4.0 Updatebeta2
Mozilla ≫ Firefox Version4.0 Updatebeta3
Mozilla ≫ Firefox Version4.0 Updatebeta4
Mozilla ≫ Firefox Version4.0 Updatebeta5
Mozilla ≫ Firefox Version4.0 Updatebeta6
Mozilla ≫ Firefox Version4.0 Updatebeta7
Mozilla ≫ Firefox Version4.0 Updatebeta8
Mozilla ≫ Firefox Version4.0 Updatebeta9
Mozilla ≫ Firefox Version4.0.1
Mozilla ≫ Firefox Version5.0
Mozilla ≫ Thunderbird Version <= 5.0
Mozilla ≫ Thunderbird Version0.1
Mozilla ≫ Thunderbird Version0.2
Mozilla ≫ Thunderbird Version0.3
Mozilla ≫ Thunderbird Version0.4
Mozilla ≫ Thunderbird Version0.5
Mozilla ≫ Thunderbird Version0.6
Mozilla ≫ Thunderbird Version0.7
Mozilla ≫ Thunderbird Version0.7.1
Mozilla ≫ Thunderbird Version0.7.2
Mozilla ≫ Thunderbird Version0.7.3
Mozilla ≫ Thunderbird Version0.8
Mozilla ≫ Thunderbird Version0.9
Mozilla ≫ Thunderbird Version1.0
Mozilla ≫ Thunderbird Version1.0.1
Mozilla ≫ Thunderbird Version1.0.2
Mozilla ≫ Thunderbird Version1.0.3
Mozilla ≫ Thunderbird Version1.0.4
Mozilla ≫ Thunderbird Version1.0.5
Mozilla ≫ Thunderbird Version1.0.6
Mozilla ≫ Thunderbird Version1.0.7
Mozilla ≫ Thunderbird Version1.0.8
Mozilla ≫ Thunderbird Version1.5
Mozilla ≫ Thunderbird Version1.5 Updatebeta2
Mozilla ≫ Thunderbird Version1.5.0.1
Mozilla ≫ Thunderbird Version1.5.0.2
Mozilla ≫ Thunderbird Version1.5.0.3
Mozilla ≫ Thunderbird Version1.5.0.4
Mozilla ≫ Thunderbird Version1.5.0.5
Mozilla ≫ Thunderbird Version1.5.0.6
Mozilla ≫ Thunderbird Version1.5.0.7
Mozilla ≫ Thunderbird Version1.5.0.8
Mozilla ≫ Thunderbird Version1.5.0.9
Mozilla ≫ Thunderbird Version1.5.0.10
Mozilla ≫ Thunderbird Version1.5.0.11
Mozilla ≫ Thunderbird Version1.5.0.12
Mozilla ≫ Thunderbird Version1.5.0.13
Mozilla ≫ Thunderbird Version1.5.0.14
Mozilla ≫ Thunderbird Version1.5.1
Mozilla ≫ Thunderbird Version1.5.2
Mozilla ≫ Thunderbird Version1.7.1
Mozilla ≫ Thunderbird Version1.7.3
Mozilla ≫ Thunderbird Version2.0
Mozilla ≫ Thunderbird Version2.0.0.0
Mozilla ≫ Thunderbird Version2.0.0.1
Mozilla ≫ Thunderbird Version2.0.0.2
Mozilla ≫ Thunderbird Version2.0.0.3
Mozilla ≫ Thunderbird Version2.0.0.4
Mozilla ≫ Thunderbird Version2.0.0.5
Mozilla ≫ Thunderbird Version2.0.0.6
Mozilla ≫ Thunderbird Version2.0.0.7
Mozilla ≫ Thunderbird Version2.0.0.8
Mozilla ≫ Thunderbird Version2.0.0.9
Mozilla ≫ Thunderbird Version2.0.0.12
Mozilla ≫ Thunderbird Version2.0.0.14
Mozilla ≫ Thunderbird Version2.0.0.16
Mozilla ≫ Thunderbird Version2.0.0.17
Mozilla ≫ Thunderbird Version2.0.0.18
Mozilla ≫ Thunderbird Version2.0.0.19
Mozilla ≫ Thunderbird Version2.0.0.21
Mozilla ≫ Thunderbird Version2.0.0.22
Mozilla ≫ Thunderbird Version2.0.0.23
Mozilla ≫ Thunderbird Version3.0
Mozilla ≫ Thunderbird Version3.0.1
Mozilla ≫ Thunderbird Version3.0.2
Mozilla ≫ Thunderbird Version3.0.3
Mozilla ≫ Thunderbird Version3.0.4
Mozilla ≫ Thunderbird Version3.0.5
Mozilla ≫ Thunderbird Version3.0.6
Mozilla ≫ Thunderbird Version3.0.7
Mozilla ≫ Thunderbird Version3.0.8
Mozilla ≫ Thunderbird Version3.0.9
Mozilla ≫ Thunderbird Version3.0.10
Mozilla ≫ Thunderbird Version3.0.11
Mozilla ≫ Thunderbird Version3.1
Mozilla ≫ Thunderbird Version3.1.1
Mozilla ≫ Thunderbird Version3.1.2
Mozilla ≫ Thunderbird Version3.1.3
Mozilla ≫ Thunderbird Version3.1.4
Mozilla ≫ Thunderbird Version3.1.5
Mozilla ≫ Thunderbird Version3.1.6
Mozilla ≫ Thunderbird Version3.1.7
Mozilla ≫ Seamonkey Version1.0
Mozilla ≫ Seamonkey Version1.0 Updatealpha
Mozilla ≫ Seamonkey Version1.0 Updatebeta
Mozilla ≫ Seamonkey Version1.0.1
Mozilla ≫ Seamonkey Version1.0.2
Mozilla ≫ Seamonkey Version1.0.3
Mozilla ≫ Seamonkey Version1.0.4
Mozilla ≫ Seamonkey Version1.0.5
Mozilla ≫ Seamonkey Version1.0.6
Mozilla ≫ Seamonkey Version1.0.7
Mozilla ≫ Seamonkey Version1.0.8
Mozilla ≫ Seamonkey Version1.0.9
Mozilla ≫ Seamonkey Version1.1
Mozilla ≫ Seamonkey Version1.1 Updatealpha
Mozilla ≫ Seamonkey Version1.1 Updatebeta
Mozilla ≫ Seamonkey Version1.1.1
Mozilla ≫ Seamonkey Version1.1.2
Mozilla ≫ Seamonkey Version1.1.3
Mozilla ≫ Seamonkey Version1.1.4
Mozilla ≫ Seamonkey Version1.1.5
Mozilla ≫ Seamonkey Version1.1.6
Mozilla ≫ Seamonkey Version1.1.7
Mozilla ≫ Seamonkey Version1.1.8
Mozilla ≫ Seamonkey Version1.1.9
Mozilla ≫ Seamonkey Version1.1.10
Mozilla ≫ Seamonkey Version1.1.11
Mozilla ≫ Seamonkey Version1.1.12
Mozilla ≫ Seamonkey Version1.1.13
Mozilla ≫ Seamonkey Version1.1.14
Mozilla ≫ Seamonkey Version1.1.15
Mozilla ≫ Seamonkey Version1.1.16
Mozilla ≫ Seamonkey Version1.1.17
Mozilla ≫ Seamonkey Version1.1.18
Mozilla ≫ Seamonkey Version1.1.19
Mozilla ≫ Seamonkey Version1.5.0.8
Mozilla ≫ Seamonkey Version1.5.0.9
Mozilla ≫ Seamonkey Version1.5.0.10
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.38% 0.564
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.