CVE-2011-1300 | BDVDB-2026-45797 Detail
Description#
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2011/1006
- http://code.google.com/p/angleproject/source/detail?r=611
- http://www.securitytracker.com/id?1025377
- http://code.google.com/p/chromium/issues/detail?id=70070
- http://secunia.com/advisories/44141
- http://www.securityfocus.com/bid/47377
- https://bugzilla.mozilla.org/show_bug.cgi?id=623791
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66766
- http://www.mozilla.org/security/announce/2011/mfsa2011-17.html
- http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.