Information disclosure in Apple Mac OS X
CVE-2013-1729
The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.
Vulnerability class: Information Disclosure
EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Mozilla Firefox — versions 19.0, 19.0.1, 19.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (vendor-advisory, x_refsource_FEDORA)
- security@mozilla.org (vendor-advisory, x_refsource_FEDORA)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (vendor-advisory, x_refsource_FEDORA)
- security@mozilla.org (x_refsource_CONFIRM)