Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2599
HistoryJun 30, 2011 - 12:00 a.m.

CVE-2011-2599

2011-06-3000:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

65.4%

Google Chrome 11 does not block use of a cross-domain image as a WebGL
texture, which allows remote attackers to obtain approximate copies of
arbitrary images via a timing attack involving a crafted WebGL fragment
shader.

Notes

Author Note
jdstrand No fix available after 1.5 years. Marking deferred for now. Will re-open if new information becomes available.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.003

Percentile

65.4%

Related for UB:CVE-2011-2599