CVEvulnerability
CVE-2011-2598
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory.
Affected configurations
• mozilla firefox 4.0
• mozilla firefox 4.0.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://blog.mozilla.com/security/2011/06/16/webgl-graphics-memory-stealing-issue/ blog.mozilla.com
- http://www.contextis.com/resources/blog/webgl2/ Exploit
- http://www.securityfocus.com/bid/48319 www.securityfocus.com
- http://www.theregister.co.uk/2011/06/16/webgl_security_threats_redux/ www.theregister.co.uk
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14207 oval.cisecurity.org
- http://blog.mozilla.com/security/2011/06/16/webgl-graphics-memory-stealing-issue/ blog.mozilla.com
- http://www.contextis.com/resources/blog/webgl2/ Exploit
- http://www.securityfocus.com/bid/48319 www.securityfocus.com
- http://www.theregister.co.uk/2011/06/16/webgl_security_threats_redux/ www.theregister.co.uk
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14207 oval.cisecurity.org