CVE

Id
84484  
CVE No.
CVE-2015-7207  
Status
Candidate  
Description
Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.  
Phase
Assigned (20150916)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
748703 84484 CVE-2015-7207 MISC:https://github.com/w3c/resource-timing/issues/29  View
748704 84484 CVE-2015-7207 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-136.html  View
748705 84484 CVE-2015-7207 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1185256  View
748706 84484 CVE-2015-7207 FEDORA:FEDORA-2015-51b1105902  View
748707 84484 CVE-2015-7207 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174083.html  View
748708 84484 CVE-2015-7207 FEDORA:FEDORA-2015-7ab3d3afcf  View
748709 84484 CVE-2015-7207 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174253.html  View
748710 84484 CVE-2015-7207 GENTOO:GLSA-201512-10  View
748711 84484 CVE-2015-7207 URL:https://security.gentoo.org/glsa/201512-10  View
748712 84484 CVE-2015-7207 SUSE:openSUSE-SU-2016:0894  View
748713 84484 CVE-2015-7207 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html  View
748714 84484 CVE-2015-7207 SUSE:openSUSE-SU-2016:0307  View
748715 84484 CVE-2015-7207 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00007.html  View
748716 84484 CVE-2015-7207 SUSE:openSUSE-SU-2016:0308  View
748717 84484 CVE-2015-7207 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00008.html  View
748718 84484 CVE-2015-7207 SUSE:openSUSE-SU-2016:0876  View
748719 84484 CVE-2015-7207 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html  View
748720 84484 CVE-2015-7207 SUSE:openSUSE-SU-2015:2353  View
748721 84484 CVE-2015-7207 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00104.html  View
748722 84484 CVE-2015-7207 UBUNTU:USN-2833-1  View
748723 84484 CVE-2015-7207 URL:http://www.ubuntu.com/usn/USN-2833-1  View
748724 84484 CVE-2015-7207 BID:79280  View
748725 84484 CVE-2015-7207 URL:http://www.securityfocus.com/bid/79280  View
748726 84484 CVE-2015-7207 SECTRACK:1034426  View

Related JVN