5
CVE-2011-3653
- EPSS 1.03%
- Veröffentlicht 09.11.2011 11:55:03
- Zuletzt bearbeitet 16.06.2026 23:33:41
- Erkennungen
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Thunderbird Version <= 7.0.1
Mozilla ≫ Thunderbird Version 0.1
Mozilla ≫ Thunderbird Version 0.2
Mozilla ≫ Thunderbird Version 0.3
Mozilla ≫ Thunderbird Version 0.4
Mozilla ≫ Thunderbird Version 0.5
Mozilla ≫ Thunderbird Version 0.6
Mozilla ≫ Thunderbird Version 0.7
Mozilla ≫ Thunderbird Version 0.7.1
Mozilla ≫ Thunderbird Version 0.7.2
Mozilla ≫ Thunderbird Version 0.7.3
Mozilla ≫ Thunderbird Version 0.8
Mozilla ≫ Thunderbird Version 0.9
Mozilla ≫ Thunderbird Version 1.0
Mozilla ≫ Thunderbird Version 1.0.1
Mozilla ≫ Thunderbird Version 1.0.2
Mozilla ≫ Thunderbird Version 1.0.3
Mozilla ≫ Thunderbird Version 1.0.4
Mozilla ≫ Thunderbird Version 1.0.5
Mozilla ≫ Thunderbird Version 1.0.6
Mozilla ≫ Thunderbird Version 1.0.7
Mozilla ≫ Thunderbird Version 1.0.8
Mozilla ≫ Thunderbird Version 1.5
Mozilla ≫ Thunderbird Version 1.5 Update beta2
Mozilla ≫ Thunderbird Version 1.5.0.1
Mozilla ≫ Thunderbird Version 1.5.0.2
Mozilla ≫ Thunderbird Version 1.5.0.3
Mozilla ≫ Thunderbird Version 1.5.0.4
Mozilla ≫ Thunderbird Version 1.5.0.5
Mozilla ≫ Thunderbird Version 1.5.0.6
Mozilla ≫ Thunderbird Version 1.5.0.7
Mozilla ≫ Thunderbird Version 1.5.0.8
Mozilla ≫ Thunderbird Version 1.5.0.9
Mozilla ≫ Thunderbird Version 1.5.0.10
Mozilla ≫ Thunderbird Version 1.5.0.11
Mozilla ≫ Thunderbird Version 1.5.0.12
Mozilla ≫ Thunderbird Version 1.5.0.13
Mozilla ≫ Thunderbird Version 1.5.0.14
Mozilla ≫ Thunderbird Version 1.5.1
Mozilla ≫ Thunderbird Version 1.5.2
Mozilla ≫ Thunderbird Version 1.7.1
Mozilla ≫ Thunderbird Version 1.7.3
Mozilla ≫ Thunderbird Version 2.0
Mozilla ≫ Thunderbird Version 2.0.0.0
Mozilla ≫ Thunderbird Version 2.0.0.1
Mozilla ≫ Thunderbird Version 2.0.0.2
Mozilla ≫ Thunderbird Version 2.0.0.3
Mozilla ≫ Thunderbird Version 2.0.0.4
Mozilla ≫ Thunderbird Version 2.0.0.5
Mozilla ≫ Thunderbird Version 2.0.0.6
Mozilla ≫ Thunderbird Version 2.0.0.7
Mozilla ≫ Thunderbird Version 2.0.0.8
Mozilla ≫ Thunderbird Version 2.0.0.9
Mozilla ≫ Thunderbird Version 2.0.0.12
Mozilla ≫ Thunderbird Version 2.0.0.14
Mozilla ≫ Thunderbird Version 2.0.0.16
Mozilla ≫ Thunderbird Version 2.0.0.17
Mozilla ≫ Thunderbird Version 2.0.0.18
Mozilla ≫ Thunderbird Version 2.0.0.19
Mozilla ≫ Thunderbird Version 2.0.0.21
Mozilla ≫ Thunderbird Version 2.0.0.22
Mozilla ≫ Thunderbird Version 2.0.0.23
Mozilla ≫ Thunderbird Version 3.0
Mozilla ≫ Thunderbird Version 3.0.1
Mozilla ≫ Thunderbird Version 3.0.2
Mozilla ≫ Thunderbird Version 3.0.3
Mozilla ≫ Thunderbird Version 3.0.4
Mozilla ≫ Thunderbird Version 3.0.5
Mozilla ≫ Thunderbird Version 3.0.6
Mozilla ≫ Thunderbird Version 3.0.7
Mozilla ≫ Thunderbird Version 3.0.8
Mozilla ≫ Thunderbird Version 3.0.9
Mozilla ≫ Thunderbird Version 3.0.10
Mozilla ≫ Thunderbird Version 3.0.11
Mozilla ≫ Thunderbird Version 3.1
Mozilla ≫ Thunderbird Version 3.1.1
Mozilla ≫ Thunderbird Version 3.1.2
Mozilla ≫ Thunderbird Version 3.1.3
Mozilla ≫ Thunderbird Version 3.1.4
Mozilla ≫ Thunderbird Version 3.1.5
Mozilla ≫ Thunderbird Version 3.1.6
Mozilla ≫ Thunderbird Version 3.1.7
Mozilla ≫ Thunderbird Version 3.1.8
Mozilla ≫ Thunderbird Version 3.1.9
Mozilla ≫ Thunderbird Version 3.1.10
Mozilla ≫ Thunderbird Version 3.1.11
Mozilla ≫ Thunderbird Version 3.1.12
Mozilla ≫ Thunderbird Version 3.1.13
Mozilla ≫ Thunderbird Version 3.1.14
Mozilla ≫ Thunderbird Version 3.1.15
Mozilla ≫ Thunderbird Version 3.1.16
Mozilla ≫ Thunderbird Version 5.0
Mozilla ≫ Thunderbird Version 6.0
Mozilla ≫ Thunderbird Version 6.0.1
Mozilla ≫ Thunderbird Version 6.0.2
Mozilla ≫ Thunderbird Version 7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.03% | 0.607 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html
http://www.mozilla.org/security/announce/2011/mfsa2011-51.html
https://bugzilla.mozilla.org/show_bug.cgi?id=684882
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13347