New Search

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process or cause a denial of service (application crash) via unspecified vectors.

oval:org.mitre.oval:def:14302

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process or cause a denial of service (application crash) via unspecified vectors.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows Vista
  • Microsoft Windows 7
  • Microsoft Windows Server 2008
  • Microsoft Windows XP
  • Microsoft Windows 2000
  • Microsoft Windows Server 2003
Class:
vulnerability
Reference(s):
  • CVE-2011-2367
Product(s):
  • Mozilla Firefox