CVE-2011-2367
Firefox 4.x-4.0.1 - Information Disclosure and Denial of Service via WebGL Read Operations
Title source: llmDescription
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2011/mfsa2011-26.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=656752
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
Scores
EPSS
0.0179
EPSS Percentile
75.9%
Details
CWE
CWE-264
Status
published
Products (2)
mozilla/firefox
4.0 (13 CPE variants)
mozilla/firefox
4.0.1
Published
Jun 30, 2011
Tracked Since
Feb 18, 2026