NVD

Id
9684  
Name
CVE-2011-2986  
Description
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-08-18  
Modified Date
2012-12-18  
Seq
2011-2986  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55405 9684 CVE-2011-2986 SUSE-SA:2011:037  View
55406 9684 CVE-2011-2986 oval:org.mitre.oval:def:14497  View
55407 9684 CVE-2011-2986 http://www.mozilla.org/security/announce/2011/mfsa2011-29.html  View
55408 9684 CVE-2011-2986 http://www.mozilla.org/security/announce/2011/mfsa2011-31.html  View
55409 9684 CVE-2011-2986 http://www.mozilla.org/security/announce/2011/mfsa2011-33.html  View
55410 9684 CVE-2011-2986 https://bugzilla.mozilla.org/show_bug.cgi?id=655836  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31947 JVNDB-2011-002187 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 複数の Mozilla 製品には、Direct2D API が Windows 上で使用される時、同一生成元ポリシーを回避され、異なるドメインから重要なイメージ情報を取得される脆弱性が存在します。 CVE-2011-2986 50893 CVE-2011-2986 9684 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002187.html 2011-08-16 2011-09-06 View