Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANGLE) as used in the WebGL implementation in Mozilla Firefox 4.x through 5 Thunderbird before 6 SeaMonkey 2.x before 2.3 and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors.