VULNERABILITY INTELLIGENCE
CVE-2011-2367
CVSS score6.4 MEDIUM
EPSS probability1.84%
CISA KEVNot currently listed
Published2011-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:P
Description
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service (application crash), via unspecified vectors.