CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
96.0%
Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long source-code block for a shader.
Vendor | Product | Version | CPE |
---|---|---|---|
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:* |
mozilla | firefox | 4.0 | cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:* |
lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html
secunia.com/advisories/49055
www.mozilla.org/security/announce/2011/mfsa2011-29.html
www.mozilla.org/security/announce/2011/mfsa2011-31.html
www.mozilla.org/security/announce/2011/mfsa2011-33.html
www.securityfocus.com/bid/49242
bugzilla.mozilla.org/show_bug.cgi?id=665936
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14270