NVD

Id
8258  
Name
CVE-2011-1300  
Description
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-15  
Modified Date
2012-01-26  
Seq
2011-1300  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47457 8258 CVE-2011-1300 http://code.google.com/p/angleproject/source/detail?r=611  View
47458 8258 CVE-2011-1300 http://code.google.com/p/chromium/issues/detail?id=70070  View
47459 8258 CVE-2011-1300 http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html  View
47460 8258 CVE-2011-1300 oval:org.mitre.oval:def:14466  View
47461 8258 CVE-2011-1300 http://www.mozilla.org/security/announce/2011/mfsa2011-17.html  View
47462 8258 CVE-2011-1300 47377  View
47463 8258 CVE-2011-1300 1025377  View
47464 8258 CVE-2011-1300 ADV-2011-1006  View
47465 8258 CVE-2011-1300 chrome-gpu-dos(66766)  View
47466 8258 CVE-2011-1300 https://bugzilla.mozilla.org/show_bug.cgi?id=623791  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31435 JVNDB-2011-001675 Windows 上で稼働する Mozilla Firefox、および Google Chrome における任意のコードを実行される脆弱性 Windows 上で稼働する Mozilla Firefox、および Google Chrome の GPU プロセスで利用される、Almost Native Graphics Layer Engine (ANGLE) の WebGLES ライブラリ内にある Program::getActiveUniformMaxLength 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2011-1300 49207 CVE-2011-1300 8258 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001675.html 2011-04-07 2011-06-03 View