Lucene search

K
mozillaMozilla FoundationMFSA2011-50
HistoryNov 08, 2011 - 12:00 a.m.

Cross-origin data theft using canvas and Windows D2D — Mozilla

2011-11-0800:00:00
Mozilla Foundation
www.mozilla.org
22

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.4%

Mozilla developer Bas Schouten reported that the introduction of the “Azure” graphics back-end on Windows in Firefox 7 re-introduced the cross-origin data theft issue reported by nasalislarvatus3000 as described in MFSA 2011-29.

Affected configurations

Vulners
Node
mozillafirefoxRange<8
OR
mozillaseamonkeyRange<2.5
OR
mozillathunderbirdRange<8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.4%