Cross site scripting

Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2599

Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2366

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2599

Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2599

Removed by vendor...

CVE-2011-2366

CVE-2011-2366 : Gecko-based browsers (Firefox < 5.0, Thunderbird

CVE-2011-2599

CVE-2011-2599 concerns Google Chrome 11, where the WebGL implementation did not block using a cross-domain image as a WebGL texture. This enables a timing attack to obtain approximate copies of arbitrary images, constituting an information disclosure vulnerability. The issue is described across m...

PT-2011-3948

Name of the Vulnerable Software and Affected Versions Google Chrome version 11 Description The issue allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader, as Google Chrome 11 does not block the use of a cross-domain...

CVE-2011-2599: Exposure of Sensitive Information to an Unauthorized Actor

Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2366: Improper Input Validation

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

CVE-2011-2366

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader...

PT-2011-3805

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 5.0 Mozilla Thunderbird versions prior to 5.0 Description The issue allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader, by no...

SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 4662)

This update of openssl fixes a timing attack. This attack can be used to obtain the private key of a TLS server whenever ECDSA signatures are used. CVE-2011-1945: CVSS v2 Base Score: 4.3 important AV:N/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues. CWE-310 %NASLMINLEVEL 70300 C Tenable Network...

DSA-2260-1 rails - several

Bulletin has no description...

CVE-2011-1945

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...

CVE-2011-1945

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...

DEBIAN-CVE-2011-1945

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...

Code injection

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...

CVE-2011-1945

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...

CVE-2011-1945

The CVE-2011-1945 entry concerns the ECC subsystem in OpenSSL 1.0.0d and earlier, where ECDSA used for the ECDHE_ECDSA cipher suite does not properly implement curves over binary fields. This weakness can enable context-dependent attackers to recover private keys via timing attacks and lattice ca...