CVE-2011-2366 – Ubuntu Security Notice USN-1157-1

https://notcve.org/view.php?id=CVE-2011-2366

23 Jun 2011 — Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader. Mozilla Gecko usado en Firefox v5.0 y Thunderbird antes de v5.0, no bloquea el uso de una imagen como textura WebGL en dominios cruzados, lo que permite a atacantes remotos obtener copias aproximadas de imágenes arbitrarias... • http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html • CWE-20: Improper Input Validation •