CVE-2011-3653

CVE-2011-3653

EPSS 1.1%

Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html https://bugzilla.mozilla.org/show_bug.cgi?id=684882 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13347 http://www.mozilla.org/security/announce/2011/mfsa2011-51.html