CVE-2011-1300

The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an "off-by-three" error.

• CWE-189

• http://code.google.com/p/angleproject/source/detail?r=611Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=70070Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.htmlVendor Advisory
• http://secunia.com/advisories/44141Vendor Advisory
• http://www.mozilla.org/security/announce/2011/mfsa2011-17.htmlVendor Advisory
• http://www.securityfocus.com/bid/47377Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025377Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/1006Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=623791Issue Tracking, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66766Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466Third Party Advisory
• http://code.google.com/p/angleproject/source/detail?r=611Vendor Advisory
• http://code.google.com/p/chromium/issues/detail?id=70070Vendor Advisory
• http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.htmlVendor Advisory
• http://secunia.com/advisories/44141Vendor Advisory
• http://www.mozilla.org/security/announce/2011/mfsa2011-17.htmlVendor Advisory
• http://www.securityfocus.com/bid/47377Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025377Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/1006Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=623791Issue Tracking, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66766Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14466Third Party Advisory

Published

Apr 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1292Use-after-free vulnerability in the frame-loader implementat…
• CVE-2011-1293Use-after-free vulnerability in the HTMLCollection implement…
• CVE-2011-1294Google Chrome before 10.0.648.204 does not properly handle C…
• CVE-2011-1295WebKit, as used in Google Chrome before 10.0.648.204 and App…
• CVE-2011-1296Google Chrome before 10.0.648.204 does not properly handle S…
• CVE-2011-1298An Integer Overflow exists in WebKit in Google Chrome before…7.5
• CVE-2011-1301Use-after-free vulnerability in the GPU process in Google Ch…
• CVE-2011-1302Heap-based buffer overflow in the GPU process in Google Chro…
• CVE-2011-1303Google Chrome before 11.0.696.57 does not properly handle fl…
• CVE-2011-1304Unspecified vulnerability in Google Chrome before 11.0.696.5…
• CVE-2011-1305Race condition in Google Chrome before 11.0.696.57 on Linux …
• CVE-2011-1306Unspecified vulnerability in the Scratchpad application in G…