Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gpjh-cmj6-fjw9

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

EPSS

Процентиль: 76%
0.01771
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 11 лет назад

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

redhat
почти 11 лет назад

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

nvd
почти 11 лет назад

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

debian
почти 11 лет назад

Mozilla Firefox before 41.0 does not properly restrict the availabilit ...

fstec
почти 11 лет назад

Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 76%
0.01771
Низкий

Дефекты

CWE-200