PT-2016-7641 · Mozilla+3 · Firefox Esr+5

Franziskus Kiefer

·

Publicado

2016-11-15

·

Atualizado

2024-12-12

·

CVE-2016-9074

CVSS v3.1

5.9

Média

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 50 Firefox ESR versions prior to 45.5 Thunderbird versions prior to 45.5
Description The issue arises from an insufficient existing mitigation of timing side-channel attacks. This can be exploited under certain circumstances. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For Firefox versions prior to 50, update to version 50 or later. For Firefox ESR versions prior to 45.5, update to version 45.5 or later. For Thunderbird versions prior to 45.5, update to version 45.5 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2016-2307
ALT-PU-2016-2321
ALT-PU-2017-1578
CVE-2016-9074
DLA-752-1
DLA-759-1
DSA-3716-1
DSA-3730-1
MGASA-2016-0379
OPENSUSE-SU-2016_2861-1
OPENSUSE-SU-2016_3011-1
OPENSUSE-SU-2024:10071-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2016:3014-1
SUSE-SU-2016:3080-1
SUSE-SU-2016:3105-1
USN-3163-1

Produtos afetados

Alt Linux
Firefox
Firefox Esr
Suse
Thunderbird
Ubuntu