PT-2011-3948
CVE-2011-2599
·
Published
2011-06-30
·
Updated
2017-09-19
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome version 11
Description
The issue allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader, as Google Chrome 11 does not block the use of a cross-domain image as a WebGL texture.
Recommendations
For Google Chrome version 11, update to a version that includes a fix for this issue to prevent exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾