FICHE CVE

CVE-2011-2366

Publiée le 2011-06-30 · Dernière modification le 2026-06-16

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.

CVSS 2.04.3 MOYENNE

Type de faiblesse

Validation des entrées insuffisante · CWE-20