Lucene search

Mozilla FoundationMFSA2012-26

HistoryApr 24, 2012 - 12:00 a.m.

WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error — Mozilla

2012-04-2400:00:00

Mozilla Foundation

www.mozilla.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

JSON

Mozilla community member Matias Juntunen discovered an error in WebGLBuffer where FindMaxElementInSubArray receives wrong template arguments from FindMaxUshortElement. This bug causes maximum index to be computed incorrectly within WebGL.drawElements, allowing the reading of illegal video memory.

Affected configurations

Vulners

Node

mozillafirefoxRange<12

mozillafirefox_esrRange<10.0.4

mozillaseamonkeyRange<2.9

mozillathunderbirdRange<12

mozillathunderbird_esrRange<10.0.4

CPENameOperatorVersion
firefoxlt12
firefox esrlt10.0.4
seamonkeylt2.9
thunderbirdlt12
thunderbird esrlt10.0.4

Name	Operator	Version
firefox	lt	12
firefox esr	lt	10.0.4
seamonkey	lt	2.9
thunderbird	lt	12
thunderbird esr	lt	10.0.4

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0473

bugzilla.mozilla.org/show_bug.cgi?id=743475

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for MFSA2012-26