CVE-2011-2599

Publication date 30 June 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
chromium-browser 12.10 quantal Ignored end of life, was deferred
12.04 LTS precise Ignored end of life, was deferred
11.10 oneiric Ignored end of life, was deferred
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life, was deferred
8.04 LTS hardy Not in release

Notes

jdstrand

No fix available after 1.5 years. Marking deferred for now. Will re-open if new information becomes available.