Beveiligingsadvies

CVE-2011-2366

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-06-30 15:26:00
Laatst bijgewerkt 2024-08-06 23:00:33
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.