Lucene search
Ubuntu.comUB:CVE-2011-2986HistoryAug 18, 2011 - 12:00 a.m.
CVE-2011-2986
2011-08-1800:00:00
ubuntu.com
ubuntu.com
10
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.2%
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before
2.3, and possibly other products, when the Direct2D (aka D2D) API is used
on Windows, allows remote attackers to bypass the Same Origin Policy, and
obtain sensitive image data from a different domain, by inserting this data
into a canvas.
Notes
| Author | Note |
|---|---|
| jdstrand | Only Firefox/TBird 5 and Windows only |
Related
prion
prion
Design/Logic Flaw
2011-08-18 18:55:00
Design/Logic Flaw
2011-11-09 11:55:00
cvelist
cvelist
CVE-2011-2986
2011-08-18 18:00:00
CVE-2011-3649
2011-11-09 11:00:00
cve
cve
CVE-2011-2986
2011-08-18 18:55:00
CVE-2011-3649
2011-11-09 11:55:00
mozilla
mozilla
Cross-origin data theft using canvas and Windows D2D — Mozilla
2011-11-08 00:00:00
Security issues addressed in Thunderbird 6 — Mozilla
2011-08-16 00:00:00
Security issues addressed in SeaMonkey 2.3 — Mozilla
2011-08-16 00:00:00
ubuntucve
ubuntucve
CVE-2011-3649
2011-11-09 00:00:00
openvas
openvas
Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows)
2011-09-09 00:00:00
Mozilla Products Multiple Vulnerabilities (Sep 2011) - Windows
2011-09-09 00:00:00
Fedora Update for firefox FEDORA-2011-11106
2011-08-19 00:00:00
nessus
nessus
Mozilla Thunderbird < 6.0 Multiple Vulnerabilities
2011-08-18 00:00:00
Mozilla Thunderbird 5 Multiple Vulnerabilities
2011-08-18 00:00:00
Mozilla Thunderbird < 8.0 Multiple Vulnerabilities
2013-05-06 00:00:00
suse
suse
seamonkey: Update to Mozilla Seamonkey 2.3 (important)
2011-08-26 20:08:16
MozillaFirefox: Update to Firefox 6 (important)
2011-08-29 21:08:18
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2011-08-29 16:12:15
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
securityvulns
securityvulns
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkey多个安全漏洞
2011-08-18 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.2%
Related for UB:CVE-2011-2986