CVE-2011-2366

Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 72.4%
Affected Products (NVD)
VendorProductVersion
mozillagecko
𝑥
≤ 2
mozillagecko
1.7
mozillagecko
1.8
mozillagecko
1.8.1
mozillagecko
1.9
mozillagecko
1.9.1
mozillagecko
1.9.2
mozillafirefox
𝑥
≤ 4.0.1
mozillafirefox_esr
𝑥
≤ 4.0.1
mozillafirefox
0.1
mozillafirefox_esr
0.1
mozillafirefox
0.2
mozillafirefox_esr
0.2
mozillafirefox
0.3
mozillafirefox_esr
0.3
mozillafirefox
0.4
mozillafirefox_esr
0.4
mozillafirefox
0.5
mozillafirefox_esr
0.5
mozillafirefox
0.6
mozillafirefox_esr
0.6
mozillafirefox
0.6.1
mozillafirefox_esr
0.6.1
mozillafirefox
0.7
mozillafirefox_esr
0.7
mozillafirefox
0.7.1
mozillafirefox_esr
0.7.1
mozillafirefox
0.8
mozillafirefox_esr
0.8
mozillafirefox
0.9
mozillafirefox_esr
0.9
mozillafirefox
0.9:rc
mozillafirefox_esr
0.9:rc
mozillafirefox
0.9.1
mozillafirefox_esr
0.9.1
mozillafirefox
0.9.2
mozillafirefox_esr
0.9.2
mozillafirefox
0.9.3
mozillafirefox_esr
0.9.3
mozillafirefox
0.10
mozillafirefox_esr
0.10
mozillafirefox
0.10.1
mozillafirefox_esr
0.10.1
mozillafirefox
1.0
mozillafirefox_esr
1.0
mozillafirefox
1.0:preview_release
mozillafirefox_esr
1.0:preview_release
mozillafirefox
1.0.1
mozillafirefox_esr
1.0.1
mozillafirefox
1.0.2
mozillafirefox_esr
1.0.2
mozillafirefox
1.0.3
mozillafirefox_esr
1.0.3
mozillafirefox
1.0.4
mozillafirefox_esr
1.0.4
mozillafirefox
1.0.5
mozillafirefox_esr
1.0.5
mozillafirefox
1.0.6
mozillafirefox_esr
1.0.6
mozillafirefox
1.0.7
mozillafirefox_esr
1.0.7
mozillafirefox
1.0.8
mozillafirefox_esr
1.0.8
mozillafirefox
1.4.1
mozillafirefox_esr
1.4.1
mozillafirefox
1.5
mozillafirefox_esr
1.5
mozillafirefox
1.5:beta1
mozillafirefox_esr
1.5:beta1
mozillafirefox
1.5:beta2
mozillafirefox_esr
1.5:beta2
mozillafirefox
1.5.0.1
mozillafirefox_esr
1.5.0.1
mozillafirefox
1.5.0.2
mozillafirefox_esr
1.5.0.2
mozillafirefox
1.5.0.3
mozillafirefox_esr
1.5.0.3
mozillafirefox
1.5.0.4
mozillafirefox_esr
1.5.0.4
mozillafirefox
1.5.0.5
mozillafirefox_esr
1.5.0.5
mozillafirefox
1.5.0.6
mozillafirefox_esr
1.5.0.6
mozillafirefox
1.5.0.7
mozillafirefox_esr
1.5.0.7
mozillafirefox
1.5.0.8
mozillafirefox_esr
1.5.0.8
mozillafirefox
1.5.0.9
mozillafirefox_esr
1.5.0.9
mozillafirefox
1.5.0.10
mozillafirefox_esr
1.5.0.10
mozillafirefox
1.5.0.11
mozillafirefox_esr
1.5.0.11
mozillafirefox
1.5.0.12
mozillafirefox_esr
1.5.0.12
mozillafirefox
1.5.1
mozillafirefox_esr
1.5.1
mozillafirefox
1.5.2
mozillafirefox_esr
1.5.2
mozillafirefox
1.5.3
mozillafirefox_esr
1.5.3
mozillafirefox
1.5.4
mozillafirefox_esr
1.5.4
mozillafirefox
1.5.5
mozillafirefox_esr
1.5.5
mozillafirefox
1.5.6
mozillafirefox_esr
1.5.6
mozillafirefox
1.5.7
mozillafirefox_esr
1.5.7
mozillafirefox
1.5.8
mozillafirefox_esr
1.5.8
mozillafirefox
1.8
mozillafirefox_esr
1.8
mozillafirefox
2.0
mozillafirefox_esr
2.0
mozillafirefox
2.0.0.1
mozillafirefox_esr
2.0.0.1
mozillafirefox
2.0.0.2
mozillafirefox_esr
2.0.0.2
mozillafirefox
2.0.0.3
mozillafirefox_esr
2.0.0.3
mozillafirefox
2.0.0.4
mozillafirefox_esr
2.0.0.4
mozillafirefox
2.0.0.5
mozillafirefox_esr
2.0.0.5
mozillafirefox
2.0.0.6
mozillafirefox_esr
2.0.0.6
mozillafirefox
2.0.0.7
mozillafirefox_esr
2.0.0.7
mozillafirefox
2.0.0.8
mozillafirefox_esr
2.0.0.8
mozillafirefox
2.0.0.9
mozillafirefox_esr
2.0.0.9
mozillafirefox
2.0.0.10
mozillafirefox_esr
2.0.0.10
mozillafirefox
2.0.0.11
mozillafirefox_esr
2.0.0.11
mozillafirefox
2.0.0.12
mozillafirefox_esr
2.0.0.12
mozillafirefox
2.0.0.13
mozillafirefox_esr
2.0.0.13
mozillafirefox
2.0.0.14
mozillafirefox_esr
2.0.0.14
mozillafirefox
2.0.0.15
mozillafirefox_esr
2.0.0.15
mozillafirefox
2.0.0.16
mozillafirefox_esr
2.0.0.16
mozillafirefox
2.0.0.17
mozillafirefox_esr
2.0.0.17
mozillafirefox
2.0.0.18
mozillafirefox_esr
2.0.0.18
mozillafirefox
2.0.0.19
mozillafirefox_esr
2.0.0.19
mozillafirefox
2.0.0.20
mozillafirefox_esr
2.0.0.20
mozillafirefox
3.0
mozillafirefox_esr
3.0
mozillafirefox
3.0.1
mozillafirefox_esr
3.0.1
mozillafirefox
3.0.2
mozillafirefox_esr
3.0.2
mozillafirefox
3.0.3
mozillafirefox_esr
3.0.3
mozillafirefox
3.0.4
mozillafirefox_esr
3.0.4
mozillafirefox
3.0.5
mozillafirefox_esr
3.0.5
mozillafirefox
3.0.6
mozillafirefox_esr
3.0.6
mozillafirefox
3.0.7
mozillafirefox_esr
3.0.7
mozillafirefox
3.0.8
mozillafirefox_esr
3.0.8
mozillafirefox
3.0.9
mozillafirefox_esr
3.0.9
mozillafirefox
3.0.10
mozillafirefox_esr
3.0.10
mozillafirefox
3.0.11
mozillafirefox_esr
3.0.11
mozillafirefox
3.0.12
mozillafirefox_esr
3.0.12
mozillafirefox
3.0.13
mozillafirefox_esr
3.0.13
mozillafirefox
3.0.14
mozillafirefox_esr
3.0.14
mozillafirefox
3.0.15
mozillafirefox_esr
3.0.15
mozillafirefox
3.0.16
mozillafirefox_esr
3.0.16
mozillafirefox
3.0.17
mozillafirefox_esr
3.0.17
mozillafirefox
3.5
mozillafirefox_esr
3.5
mozillafirefox
3.5.1
mozillafirefox_esr
3.5.1
mozillafirefox
3.5.2
mozillafirefox_esr
3.5.2
mozillafirefox
3.5.3
mozillafirefox_esr
3.5.3
mozillafirefox
3.5.4
mozillafirefox_esr
3.5.4
mozillafirefox
3.5.5
mozillafirefox_esr
3.5.5
mozillafirefox
3.5.6
mozillafirefox_esr
3.5.6
mozillafirefox
3.5.7
mozillafirefox_esr
3.5.7
mozillafirefox
3.5.8
mozillafirefox_esr
3.5.8
mozillafirefox
3.5.9
mozillafirefox_esr
3.5.9
mozillafirefox
3.5.10
mozillafirefox_esr
3.5.10
mozillafirefox
3.5.11
mozillafirefox_esr
3.5.11
mozillafirefox
3.5.12
mozillafirefox_esr
3.5.12
mozillafirefox
3.5.13
mozillafirefox_esr
3.5.13
mozillafirefox
3.5.14
mozillafirefox_esr
3.5.14
mozillafirefox
3.5.15
mozillafirefox_esr
3.5.15
mozillafirefox
3.6
mozillafirefox_esr
3.6
mozillafirefox
3.6.2
mozillafirefox_esr
3.6.2
mozillafirefox
3.6.3
mozillafirefox_esr
3.6.3
mozillafirefox
3.6.4
mozillafirefox_esr
3.6.4
mozillafirefox
3.6.6
mozillafirefox_esr
3.6.6
mozillafirefox
3.6.7
mozillafirefox_esr
3.6.7
mozillafirefox
3.6.8
mozillafirefox_esr
3.6.8
mozillafirefox
3.6.9
mozillafirefox_esr
3.6.9
mozillafirefox
3.6.10
mozillafirefox_esr
3.6.10
mozillafirefox
3.6.11
mozillafirefox_esr
3.6.11
mozillafirefox
3.6.12
mozillafirefox_esr
3.6.12
mozillafirefox
3.6.13
mozillafirefox_esr
3.6.13
mozillafirefox
4.0
mozillafirefox_esr
4.0
mozillafirefox
4.0:beta1
mozillafirefox_esr
4.0:beta1
mozillafirefox
4.0:beta10
mozillafirefox_esr
4.0:beta10
mozillafirefox
4.0:beta11
mozillafirefox_esr
4.0:beta11
mozillafirefox
4.0:beta12
mozillafirefox_esr
4.0:beta12
mozillafirefox
4.0:beta2
mozillafirefox_esr
4.0:beta2
mozillafirefox
4.0:beta3
mozillafirefox_esr
4.0:beta3
mozillafirefox
4.0:beta4
mozillafirefox_esr
4.0:beta4
mozillafirefox
4.0:beta5
mozillafirefox_esr
4.0:beta5
mozillafirefox
4.0:beta6
mozillafirefox_esr
4.0:beta6
mozillafirefox
4.0:beta7
mozillafirefox_esr
4.0:beta7
mozillafirefox
4.0:beta8
mozillafirefox_esr
4.0:beta8
mozillafirefox
4.0:beta9
mozillafirefox_esr
4.0:beta9
mozillathunderbird
𝑥
≤ 3.1.11
mozillathunderbird_esr
𝑥
≤ 3.1.11
mozillathunderbird
0.1
mozillathunderbird_esr
0.1
mozillathunderbird
0.2
mozillathunderbird_esr
0.2
mozillathunderbird
0.3
mozillathunderbird_esr
0.3
mozillathunderbird
0.4
mozillathunderbird_esr
0.4
mozillathunderbird
0.5
mozillathunderbird_esr
0.5
mozillathunderbird
0.6
mozillathunderbird_esr
0.6
mozillathunderbird
0.7
mozillathunderbird_esr
0.7
mozillathunderbird
0.7.1
mozillathunderbird_esr
0.7.1
mozillathunderbird
0.7.2
mozillathunderbird_esr
0.7.2
mozillathunderbird
0.7.3
mozillathunderbird_esr
0.7.3
mozillathunderbird
0.8
mozillathunderbird_esr
0.8
mozillathunderbird
0.9
mozillathunderbird_esr
0.9
mozillathunderbird
1.0
mozillathunderbird_esr
1.0
mozillathunderbird
1.0.1
mozillathunderbird_esr
1.0.1
mozillathunderbird
1.0.2
mozillathunderbird_esr
1.0.2
mozillathunderbird
1.0.3
mozillathunderbird_esr
1.0.3
mozillathunderbird
1.0.4
mozillathunderbird_esr
1.0.4
mozillathunderbird
1.0.5
mozillathunderbird_esr
1.0.5
mozillathunderbird
1.0.6
mozillathunderbird_esr
1.0.6
mozillathunderbird
1.0.7
mozillathunderbird_esr
1.0.7
mozillathunderbird
1.0.8
mozillathunderbird_esr
1.0.8
mozillathunderbird
1.5
mozillathunderbird_esr
1.5
mozillathunderbird
1.5:beta2
mozillathunderbird_esr
1.5:beta2
mozillathunderbird
1.5.0.1
mozillathunderbird_esr
1.5.0.1
mozillathunderbird
1.5.0.2
mozillathunderbird_esr
1.5.0.2
mozillathunderbird
1.5.0.3
mozillathunderbird_esr
1.5.0.3
mozillathunderbird
1.5.0.4
mozillathunderbird_esr
1.5.0.4
mozillathunderbird
1.5.0.5
mozillathunderbird_esr
1.5.0.5
mozillathunderbird
1.5.0.6
mozillathunderbird_esr
1.5.0.6
mozillathunderbird
1.5.0.7
mozillathunderbird_esr
1.5.0.7
mozillathunderbird
1.5.0.8
mozillathunderbird_esr
1.5.0.8
mozillathunderbird
1.5.0.9
mozillathunderbird_esr
1.5.0.9
mozillathunderbird
1.5.0.10
mozillathunderbird_esr
1.5.0.10
mozillathunderbird
1.5.0.11
mozillathunderbird_esr
1.5.0.11
mozillathunderbird
1.5.0.12
mozillathunderbird_esr
1.5.0.12
mozillathunderbird
1.5.0.13
mozillathunderbird_esr
1.5.0.13
mozillathunderbird
1.5.0.14
mozillathunderbird_esr
1.5.0.14
mozillathunderbird
1.5.1
mozillathunderbird_esr
1.5.1
mozillathunderbird
1.5.2
mozillathunderbird_esr
1.5.2
mozillathunderbird
1.7.1
mozillathunderbird_esr
1.7.1
mozillathunderbird
1.7.3
mozillathunderbird_esr
1.7.3
mozillathunderbird
2.0
mozillathunderbird_esr
2.0
mozillathunderbird
2.0.0.0
mozillathunderbird_esr
2.0.0.0
mozillathunderbird
2.0.0.1
mozillathunderbird_esr
2.0.0.1
mozillathunderbird
2.0.0.2
mozillathunderbird_esr
2.0.0.2
mozillathunderbird
2.0.0.3
mozillathunderbird_esr
2.0.0.3
mozillathunderbird
2.0.0.4
mozillathunderbird_esr
2.0.0.4
mozillathunderbird
2.0.0.5
mozillathunderbird_esr
2.0.0.5
mozillathunderbird
2.0.0.6
mozillathunderbird_esr
2.0.0.6
mozillathunderbird
2.0.0.7
mozillathunderbird_esr
2.0.0.7
mozillathunderbird
2.0.0.8
mozillathunderbird_esr
2.0.0.8
mozillathunderbird
2.0.0.9
mozillathunderbird_esr
2.0.0.9
mozillathunderbird
2.0.0.12
mozillathunderbird_esr
2.0.0.12
mozillathunderbird
2.0.0.14
mozillathunderbird_esr
2.0.0.14
mozillathunderbird
2.0.0.16
mozillathunderbird_esr
2.0.0.16
mozillathunderbird
2.0.0.17
mozillathunderbird_esr
2.0.0.17
mozillathunderbird
2.0.0.18
mozillathunderbird_esr
2.0.0.18
mozillathunderbird
2.0.0.19
mozillathunderbird_esr
2.0.0.19
mozillathunderbird
2.0.0.21
mozillathunderbird_esr
2.0.0.21
mozillathunderbird
2.0.0.22
mozillathunderbird_esr
2.0.0.22
mozillathunderbird
2.0.0.23
mozillathunderbird_esr
2.0.0.23
mozillathunderbird
3.0
mozillathunderbird_esr
3.0
mozillathunderbird
3.0.1
mozillathunderbird_esr
3.0.1
mozillathunderbird
3.0.2
mozillathunderbird_esr
3.0.2
mozillathunderbird
3.0.3
mozillathunderbird_esr
3.0.3
mozillathunderbird
3.0.4
mozillathunderbird_esr
3.0.4
mozillathunderbird
3.0.5
mozillathunderbird_esr
3.0.5
mozillathunderbird
3.0.6
mozillathunderbird_esr
3.0.6
mozillathunderbird
3.0.7
mozillathunderbird_esr
3.0.7
mozillathunderbird
3.0.8
mozillathunderbird_esr
3.0.8
mozillathunderbird
3.0.9
mozillathunderbird_esr
3.0.9
mozillathunderbird
3.0.10
mozillathunderbird_esr
3.0.10
mozillathunderbird
3.0.11
mozillathunderbird_esr
3.0.11
mozillathunderbird
3.1
mozillathunderbird_esr
3.1
mozillathunderbird
3.1.1
mozillathunderbird_esr
3.1.1
mozillathunderbird
3.1.2
mozillathunderbird_esr
3.1.2
mozillathunderbird
3.1.3
mozillathunderbird_esr
3.1.3
mozillathunderbird
3.1.4
mozillathunderbird_esr
3.1.4
mozillathunderbird
3.1.5
mozillathunderbird_esr
3.1.5
mozillathunderbird
3.1.6
mozillathunderbird_esr
3.1.6
mozillathunderbird
3.1.7
mozillathunderbird_esr
3.1.7
mozillathunderbird
3.1.8
mozillathunderbird_esr
3.1.8
mozillathunderbird
3.1.9
mozillathunderbird_esr
3.1.9
mozillathunderbird
3.1.10
mozillathunderbird_esr
3.1.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
hardy
ignored
lucid
not-affected
maverick
not-affected
natty
Fixed 5.0+build1+nobinonly-0ubuntu0.11.04.1
released
oneiric
not-affected
precise
not-affected
quantal
not-affected
firefox-3.0
hardy
ignored
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
firefox-3.5
hardy
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
seamonkey
hardy
ignored
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected
precise
dne
quantal
dne
thunderbird
hardy
ignored
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected
precise
not-affected
quantal
not-affected
xulrunner-1.9.2
hardy
ignored
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
dne
precise
dne
quantal
dne
xulrunner-2.0
hardy
dne
lucid
dne
maverick
dne
natty
ignored
oneiric
dne
precise
dne
quantal
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-March/030882.html
http://www.contextis.co.uk/resources/blog/webgl/
http://www.mozilla.org/security/announce/2011/mfsa2011-25.html
https://bugzilla.mozilla.org/show_bug.cgi?id=655987
https://bugzilla.mozilla.org/show_bug.cgi?id=656277
https://bugzilla.mozilla.org/show_bug.cgi?id=659349
https://developer.mozilla.org/en/WebGL/Cross-Domain_Textures
https://hacks.mozilla.org/2011/06/cross-domain-webgl-textures-disabled-in-firefox-5/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14221
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html
http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-March/030882.html
http://www.contextis.co.uk/resources/blog/webgl/
http://www.mozilla.org/security/announce/2011/mfsa2011-25.html
https://bugzilla.mozilla.org/show_bug.cgi?id=655987
https://bugzilla.mozilla.org/show_bug.cgi?id=656277
https://bugzilla.mozilla.org/show_bug.cgi?id=659349
https://developer.mozilla.org/en/WebGL/Cross-Domain_Textures
https://hacks.mozilla.org/2011/06/cross-domain-webgl-textures-disabled-in-firefox-5/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14221