Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2366
HistoryJun 24, 2011 - 12:00 a.m.

CVE-2011-2366

2011-06-2400:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.013

Percentile

86.1%

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird
before 5.0, does not block use of a cross-domain image as a WebGL texture,
which allows remote attackers to obtain approximate copies of arbitrary
images via a timing attack involving a crafted WebGL fragment shader.

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox<Β 5.0+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.013

Percentile

86.1%