NVD

Id
18281  
Name
CVE-2016-1967  
Description
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1967  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101220 18281 CVE-2016-1967 openSUSE-SU-2016:0731  View
101221 18281 CVE-2016-1967 openSUSE-SU-2016:0733  View
101222 18281 CVE-2016-1967 http://www.mozilla.org/security/announce/2016/mfsa2016-29.html  View
101223 18281 CVE-2016-1967 1035215  View
101224 18281 CVE-2016-1967 USN-2917-1  View
101225 18281 CVE-2016-1967 USN-2917-2  View
101226 18281 CVE-2016-1967 USN-2917-3  View
101227 18281 CVE-2016-1967 https://bugzilla.mozilla.org/show_bug.cgi?id=1246956  View
101228 18281 CVE-2016-1967 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
988 JVNDB-2016-001761 Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 Mozilla Firefox は、IFRAME Resource Timing API の時間の可用性を適切に制限しないため、同一生成元ポリシーを回避され、重要な情報を取得される脆弱性が存在します。 CVE-2016-1967 88473 CVE-2016-1967 18281 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001761.html 2016-03-08 2016-03-18 View