Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2016-9904
PUBLISHED
More InfoOfficial Page
Assigner-mozilla
Assigner Org ID-f16b083a-5664-49f3-a51e-8d479e5ed7fe
View Known Exploited Vulnerability (KEV) details
Published At-11 Jun, 2018 | 21:00
Updated At-06 Aug, 2024 | 03:07
Rejected At-
▼CVE Numbering Authority (CNA)

An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.

Affected Products
Vendor
Mozilla CorporationMozilla
Product
Firefox
Versions
Affected
  • From unspecified before 50.1 (custom)
Vendor
Mozilla CorporationMozilla
Product
Firefox ESR
Versions
Affected
  • From unspecified before 45.6 (custom)
Vendor
Mozilla CorporationMozilla
Product
Thunderbird
Versions
Affected
  • From unspecified before 45.6 (custom)
Problem Types
TypeCWE IDDescription
textN/ACross-origin information leak in shared atoms
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.mozilla.org/security/advisories/mfsa2016-94/
x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=1317936
x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2016-95/
x_refsource_CONFIRM
http://www.securityfocus.com/bid/94885
vdb-entry
x_refsource_BID
http://www.securitytracker.com/id/1037461
vdb-entry
x_refsource_SECTRACK
https://security.gentoo.org/glsa/201701-15
vendor-advisory
x_refsource_GENTOO
https://www.debian.org/security/2017/dsa-3757
vendor-advisory
x_refsource_DEBIAN
https://www.mozilla.org/security/advisories/mfsa2016-96/
x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2946.html
vendor-advisory
x_refsource_REDHAT
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.mozilla.org/security/advisories/mfsa2016-94/
x_refsource_CONFIRM
x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1317936
x_refsource_CONFIRM
x_transferred
https://www.mozilla.org/security/advisories/mfsa2016-95/
x_refsource_CONFIRM
x_transferred
http://www.securityfocus.com/bid/94885
vdb-entry
x_refsource_BID
x_transferred
http://www.securitytracker.com/id/1037461
vdb-entry
x_refsource_SECTRACK
x_transferred
https://security.gentoo.org/glsa/201701-15
vendor-advisory
x_refsource_GENTOO
x_transferred
https://www.debian.org/security/2017/dsa-3757
vendor-advisory
x_refsource_DEBIAN
x_transferred
https://www.mozilla.org/security/advisories/mfsa2016-96/
x_refsource_CONFIRM
x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2946.html
vendor-advisory
x_refsource_REDHAT
x_transferred
Details not found