Vulnérabilité · NVD

CVE-2011-2986

N/A Publié le 2011-08-18

EN Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D (aka D2D) API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas.

EPSS 1.20% au-dessus de la médiane percentile 65.2%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affecté — Corrigé — Dernière suivie 153.0.2 indéterminé

Configurations CPE vulnérables (82)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤5.0	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5:beta2::::::
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.7:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.8:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.9:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.10:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.0.11:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.3:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.4:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.5:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.6:::::::*
mozilla	thunderbird Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:mozilla:thunderbird:3.1.7:::::::*

Voir sur NVD ↗ Advisory · www.mozilla.org