CVE-2011-1300: Critical severity firefox vulnerability
The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1300?
CVE-2011-1300 is classified as a high severity vulnerability that can lead to remote code execution.
How do I fix CVE-2011-1300?
To fix CVE-2011-1300, you should update to Mozilla Firefox version 4.0.1 or later, and Google Chrome version 10.0.648.205 or later.
Which software versions are affected by CVE-2011-1300?
CVE-2011-1300 affects Mozilla Firefox 4.0 and its beta versions, along with Google Chrome versions prior to 10.0.648.205.
What type of vulnerability is CVE-2011-1300?
CVE-2011-1300 is a vulnerability found in the WebGLES library that allows for remote code execution.
Can CVE-2011-1300 be exploited remotely?
Yes, CVE-2011-1300 can be exploited remotely, potentially allowing attackers to execute arbitrary code on the affected systems.