critical10.0
CVE-2011-2368
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary c…
Impact
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 4.0, 4.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-26.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=657201
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13912
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
- http://www.mozilla.org/security/announce/2011/mfsa2011-26.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=657201
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13912