CVE-2011-2598

Description

The WebGL implementation in Mozilla Firefox 4.x allows remote attackers to obtain screenshots of the windows of arbitrary desktop applications via vectors involving an SVG filter, an IFRAME element, and uninitialized data in graphics memory.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14207

http://www.theregister.co.uk/2011/06/16/webgl_security_threats_redux/

http://www.securityfocus.com/bid/48319

http://blog.mozilla.com/security/2011/06/16/webgl-graphics-memory-stealing-issue/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3