Description
Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.
References
- oval:org.mitre.oval:def:14183 vdb-entry signature
- http://www.contextis.co.uk/resources/blog/webgl/
- [whatwg] 20110314 Canvas and drawWindow mailing-list