Description
Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securitytracker.com/id/1036508 ↗
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html ↗
- https://www.mozilla.org/security/advisories/mfsa2016-86/ ↗
- http://www.mozilla.org/security/announce/2016/mfsa2016-84.html ↗
- http://www.ubuntu.com/usn/USN-3044-1 ↗
- http://www.debian.org/security/2016/dsa-3674 ↗
- http://www.securityfocus.com/bid/92260 ↗
- https://security.gentoo.org/glsa/201701-15 ↗
- https://bugzilla.mozilla.org/show_bug.cgi?id=1254688 ↗
- http://rhn.redhat.com/errata/RHSA-2016-1912.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html ↗
- https://www.mozilla.org/security/advisories/mfsa2016-88/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html ↗