Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3649
HistoryNov 09, 2011 - 11:55 a.m.

CVE-2011-3649

2011-11-0911:55:03
CWE-200
[email protected]
web.nvd.nist.gov
35
cve-2011-3649
mozilla firefox
thunderbird
direct2d
d2d
same origin policy
cve-2011-2986

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

9.2

Confidence

High

EPSS

0.005

Percentile

77.4%

JSON

Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE: this issue exists because of a CVE-2011-2986 regression.

Affected configurations

NVD
Node
mozillafirefoxMatch7.0
OR
mozillathunderbirdMatch7.0
AND
microsoftwindows
VendorProductVersionCPE
mozillathunderbird7.0cpe:/a:mozilla:thunderbird:7.0:::
mozillafirefox7.0cpe:/a:mozilla:firefox:7.0:::

Related

ubuntucve 2
nvd 2
mozilla 4
cvelist 2
prion 2
openvas 23
securityvulns 3
nessus 27
cve 1
freebsd 2
suse 7
seebug 1
gentoo 1
ubuntucve
ubuntucve
CVE-2011-3649
2011-11-09 00:00:00
CVE-2011-2986
2011-08-18 00:00:00
nvd
nvd
CVE-2011-3649
2011-11-09 11:55:03
CVE-2011-2986
2011-08-18 18:55:01
mozilla
mozilla
Cross-origin data theft using canvas and Windows D2D โ€” Mozilla
2011-11-08 00:00:00
Security issues addressed in Thunderbird 6 โ€” Mozilla
2011-08-16 00:00:00
Security issues addressed in SeaMonkey 2.3 โ€” Mozilla
2011-08-16 00:00:00
cvelist
cvelist
CVE-2011-3649
2011-11-09 11:00:00
CVE-2011-2986
2011-08-18 18:00:00
prion
prion
Design/Logic Flaw
2011-11-09 11:55:00
Design/Logic Flaw
2011-08-18 18:55:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2011-50) - Linux
2021-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities - Windows
2011-11-11 00:00:00
Mozilla Products Multiple Vulnerabilities (Windows)
2011-11-11 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-50
2011-11-25 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-11-25 00:00:00
Mozilla Fireox / Seamonkey / Thunderbird multiple security vulnerabilities
2011-08-19 00:00:00
nessus
nessus
Mozilla Firefox < 8.0 Multiple Vulnerabilities
2013-05-06 00:00:00
Mozilla Thunderbird 7.0 Multiple Vulnerabilities
2013-05-06 00:00:00
Firefox < 8.0 Multiple Vulnerabilities
2011-11-09 00:00:00
cve
cve
CVE-2011-2986
2011-08-18 18:55:01
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-11-08 00:00:00
mozilla -- multiple vulnerabilities
2011-08-16 00:00:00
suse
suse
Security update for Mozilla Firefox (critical)
2011-11-17 23:08:23
Security update for mozilla-nss (critical)
2011-11-18 22:08:26
Seamonkey update (critical)
2011-12-01 15:08:20
seebug
seebug
Mozilla Firefox/Thunderbird/SeaMonkeyๅคšไธชๅฎ‰ๅ…จๆผๆดž
2011-08-18 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

9.2

Confidence

High

EPSS

0.005

Percentile

77.4%

JSON
Related for CVE-2011-3649
ubuntucve2nvd2mozilla4cvelist2prion2openvas23securityvulns3nessus27cve1freebsd2suse7seebug1gentoo1