CVEvulnerability
CVE-2011-1300
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-04-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
Affected configurations
• mozilla firefox 4.0
• google chrome (< 10.0.648.205)
Related
Weakness · not in database (1)
References
- http://code.google.com/p/angleproject/source/detail?r=611 Vendor Advisory
- http://code.google.com/p/chromium/issues/detail?id=70070 Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html Vendor Advisory
- http://secunia.com/advisories/44141 Vendor Advisory
- http://www.mozilla.org/security/announce/2011/mfsa2011-17.html Vendor Advisory
- http://www.securityfocus.com/bid/47377 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1025377 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/1006 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=623791 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66766 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466 Third Party Advisory
- http://code.google.com/p/angleproject/source/detail?r=611 Vendor Advisory
- http://code.google.com/p/chromium/issues/detail?id=70070 Vendor Advisory
- http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html Vendor Advisory
- http://secunia.com/advisories/44141 Vendor Advisory
- http://www.mozilla.org/security/announce/2011/mfsa2011-17.html Vendor Advisory
- http://www.securityfocus.com/bid/47377 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1025377 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2011/1006 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=623791 Issue Tracking, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66766 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466 Third Party Advisory