CVE-2011-2603 - The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of servic

CVE-2011-2603

Summary

The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox, as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.

References

http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl2/
http://www.securityfocus.com/bid/48319

Vulnerable Configurations

cpe:2.3:a:nvidia:9400m_driver:6.2.6:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:9400m_driver:6.2.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.6.7:*:*:*:*:*:*:*

CVSS

Base:	7.1 (as of 12-07-2011 - 04:00)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:C

refmap via4

bid	48319
misc	http://www.contextis.com/resources/blog/webgl/ http://www.contextis.com/resources/blog/webgl2/

Last major update

12-07-2011 - 04:00

Published

30-06-2011 - 15:55

Last modified

12-07-2011 - 04:00