CVE-2011-2987

Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE), as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Angle, Firefox, Seamonkey, Suse, Thunderbird

Mozilla Firefox

= 4.0, 4.0.1, 5.0

Fix

Available

CVSS 2.0

10.0 HIGH

EPSS

5.5% (92th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2011-08-18