Published: 30/06/2011 Updated: 19/09/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

The WebGL implementation in Mozilla Firefox 4.x up to and including 4.0.1 does not properly restrict read operations, which allows remote malicious users to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 4.0
mozilla firefox 4.0.1

Multiple Firefox vulnerabilities have been fixed ...

Under certain circumstances, the updated translations could unintentionally install firefox ...

This update provides provides packages compatible with Firefox 5 ...

Mozilla Foundation Security Advisory 2011-26 Multiple WebGL crashes Announced June 21, 2011 Reporter Christoph Diehl Impact Critical Products Firefox, SeaMonkey Fixed in Firefox 5 ...

CWE-264 http://www.mozilla.org/security/announce/2011/mfsa2011-26.html https://bugzilla.mozilla.org/show_bug.cgi?id=656752 http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302 https://nvd.nist.gov https://usn.ubuntu.com/1157-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-2367

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect