Mozilla Gecko vulnerabilities

1 vulnerability

Known vulnerabilities in Mozilla Gecko, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2011-2366mozillafirefox+2
EPSS score
1.42%
Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbird before 5.0, does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.