NetSight
IP …
medium4.3

CVE-2011-2366

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows…

Impact

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.

Affected products

VendorProductAffected versions
MozillaGecko
through 2
Versions 1.7, 1.8, 1.8.1, 1.9, 1.9.1
MozillaFirefox
through 4.0.1
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaThunderbird
through 3.1.11
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-20

References