CVE-2011-1300

CRITICO 10.0CVE-2011-1300 · Published 15/04/2011 · updated 16/06/2026

In breve

CVE-2011-1300 è una vulnerabilità CRITICO (CVSS 10.0) che riguarda chrome (google), firefox (mozilla).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.1%, superiore al 87.9% delle vulnerabilità.
Correzione: aggiornare a 10.0.648.205 o successiva.

Package	Affected versions	Patched versions
chrome google	`< 10.0.648.205`	`10.0.648.205`
firefox mozilla	`= 4.0`	No fix yet

Description

The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.

References

code.google.com/p/angleproject/source/detail · Vendor Advisory
code.google.com/p/chromium/issues/detail · Vendor Advisory
googlechromereleases.blogspot.com/2011/04/stable-channel-update.html · Vendor Advisory
secunia.com/advisories/44141 · Vendor Advisory
mozilla.org/security/announce/2011/mfsa2011-17.html · Vendor Advisory
securityfocus.com/bid/47377 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
vupen.com/english/advisories/2011/1006 · Vendor Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/66766 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466 · Third Party Advisory

Altre vulnerabilità di chrome

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

chrome

google

< 10.0.648.205

10.0.648.205

firefox

mozilla

= 4.0

No fix yet

Description

Altre vulnerabilità di chrome

Vedi tutto →