Secunia
Login
|
|
CVE Reference: CVE-2011-2986 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2011-2986 |
|
|
Description: Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. |
|
|
CVE Status: Candidate |
|
|
References: SUSE http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html SAID Secunia Advisory: SA49055 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14497 CONFIRM http://www.mozilla.org/security/announce/2011/mfsa2011-33.html http://www.mozilla.org/security/announce/2011/mfsa2011-31.html http://www.mozilla.org/security/announce/2011/mfsa2011-29.html |
|
| Return to the previous page. |
