Lucene search

K
mozillaMozilla FoundationMFSA2011-26
HistoryJun 21, 2011 - 12:00 a.m.

Multiple WebGL crashes — Mozilla

2011-06-2100:00:00
Mozilla Foundation
www.mozilla.org
19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.039 Low

EPSS

Percentile

92.1%

Mozilla security researcher Christoph Diehl reported two crashes in WebGL code. One crash was the result of an out-of-bounds read and could be used to read data from other processes who had stored data in the GPU. The severity of this issue was determined to be high. The second crash was the result of an invalid write and could be used to execute arbitrary code. The severity of this issue was determined to be critical.

Affected configurations

Vulners
Node
mozillafirefoxRange<5
OR
mozillaseamonkeyRange<2.2
CPENameOperatorVersion
firefoxlt5
seamonkeylt2.2

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.039 Low

EPSS

Percentile

92.1%