Information disclosure in Apple Mac OS X
CVE-2011-3653
Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.
Vulnerability class: Information Disclosure
EPSS: 0.010 (60.1th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Mozilla Firefox — versions 0.1, 0.2, 0.3
- Mozilla Thunderbird — versions 0.1, 0.2, 0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)