Lucene search
Ubuntu.comUB:CVE-2011-3649HistoryNov 09, 2011 - 12:00 a.m.
CVE-2011-3649
2011-11-0900:00:00
ubuntu.com
ubuntu.com
6
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.4%
Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is
used on Windows in conjunction with the Azure graphics back-end, allow
remote attackers to bypass the Same Origin Policy, and obtain sensitive
image data from a different domain, by inserting this data into a canvas.
NOTE: this issue exists because of a CVE-2011-2986 regression.
Related
cve
cve
CVE-2011-3649
2011-11-09 11:55:03
CVE-2011-2986
2011-08-18 18:55:01
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
Design/Logic Flaw
2011-08-18 18:55:00
cvelist
cvelist
CVE-2011-3649
2011-11-09 11:00:00
CVE-2011-2986
2011-08-18 18:00:00
mozilla
mozilla
Cross-origin data theft using canvas and Windows D2D โ Mozilla
2011-11-08 00:00:00
Security issues addressed in Thunderbird 6 โ Mozilla
2011-08-16 00:00:00
Security issues addressed in SeaMonkey 2.3 โ Mozilla
2011-08-16 00:00:00
nvd
nvd
CVE-2011-3649
2011-11-09 11:55:03
CVE-2011-2986
2011-08-18 18:55:01
ubuntucve
ubuntucve
CVE-2011-2986
2011-08-18 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-50
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-50) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities - Windows
2011-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities (Windows)
2011-11-11 00:00:00
nessus
nessus
Mozilla Thunderbird 7.0 Multiple Vulnerabilities
2013-05-06 00:00:00
Mozilla Firefox < 8.0 Multiple Vulnerabilities
2013-05-06 00:00:00
Mozilla Thunderbird < 8.0 Multiple Vulnerabilities
2013-05-06 00:00:00
suse
suse
MozillaFirefox: Update to Firefox 6 (important)
2011-08-29 21:08:18
seamonkey: Update to Mozilla Seamonkey 2.3 (important)
2011-08-26 20:08:16
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyๅคไธชๅฎๅ
จๆผๆด
2011-08-18 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.4%
Related for UB:CVE-2011-3649