CVE-2015-7327

Firefox < 40.0.3 - Unauthorized Sensitive Information Exposure via High Resolution Time API

Title source: llm
STIX 2.1

Description

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls.

References (5)

Core 5
Core References
Exploit x_refsource_misc
http://arxiv.org/abs/1502.07373
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033640
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1167489
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=1153672

Scores

EPSS 0.0040
EPSS Percentile 61.0%

Details

CWE
CWE-200
Status published
Products (1)
mozilla/firefox < 40.0.3
Published Sep 24, 2015
Tracked Since Feb 18, 2026