PT-2016-1450 · Mozilla+3 · Firefox+3

Jordi Chancel · Published 2016-03-08 · Updated 2024-12-12 · CVE-2016-1967

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0

Description The issue is related to an incomplete restriction of IFRAME Resource Timing API times, allowing remote attackers to bypass the Same Origin Policy and obtain sensitive information. This can be achieved through crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session.

Recommendations For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of IFRAME elements and limiting access to the performance.getEntries function until a patch is applied. Avoid using the history.back function in conjunction with performance.getEntries calls after restoring a browser session to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-1277

ALT-PU-2016-1454

BDU:2016-00751

CVE-2016-1967

OPENSUSE-SU-2016_0731-1

OPENSUSE-SU-2016_0733-1

OPENSUSE-SU-2024:10071-1

OPENSUSE-SU-2024:14572-1

USN-2917-1

USN-2917-2

USN-2917-3

Affected Products

Alt Linux

Firefox

Suse

Ubuntu

References · 2116

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2800 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2802 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1958 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-1967 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2799 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2016-29 · Vendor Advisory
• https://security.gentoo.org/glsa/201605-06 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1968 · Vendor Advisory
• http://ubuntu.com/usn/USN-2917-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1967 · Security Note