CVE-2011-1300

Опубликовано: 15 апр. 2011

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.

Ссылки

http://code.google.com/p/angleproject/source/detail?r=611
Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=70070
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
Vendor Advisory
http://secunia.com/advisories/44141
Vendor Advisory
http://www.mozilla.org/security/announce/2011/mfsa2011-17.html
Vendor Advisory
http://www.securityfocus.com/bid/47377
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025377
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/1006
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=623791
Issue Tracking
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66766
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466
Third Party Advisory
http://code.google.com/p/angleproject/source/detail?r=611
Vendor Advisory
http://code.google.com/p/chromium/issues/detail?id=70070
Vendor Advisory
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
Vendor Advisory
http://secunia.com/advisories/44141
Vendor Advisory
http://www.mozilla.org/security/announce/2011/mfsa2011-17.html
Vendor Advisory
http://www.securityfocus.com/bid/47377
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025377
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/1006
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=623791
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 10.0.648.205 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.0723

Низкий

10 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2011-1300

ubuntu

больше 14 лет назад

GHSA-ghc9-5whm-hrvq

github

больше 3 лет назад