Lucene search

K
cve[email protected]CVE-2011-2601
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-2601

2022-10-0316:15:17
CWE-264
web.nvd.nist.gov
19
mac os x
denial of service
gpu
webgl
cve-2011-2601
security vulnerability

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.

Affected configurations

NVD
Node
applemac_os_x
CPENameOperatorVersion
apple:mac_os_xapple mac os xeq*

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

Related for CVE-2011-2601