An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be used to leak information, such as usernames embedded in JavaScript code, across websites. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2018-06-11T21:00:00
Updated: 2024-08-06T03:07:31.215Z
Reserved: 2016-12-07T00:00:00
Link: CVE-2016-9904
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-06-11T21:29:02.467
Modified: 2018-08-01T13:37:30.943
Link: CVE-2016-9904
Redhat