NetSight
IP …
medium5.0

CVE-2015-7207

Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same O…

Impact

Mozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls, a related issue to CVE-2015-1300.

Affected products

VendorProductAffected versions
MozillaFirefox
through 42.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
FedoraprojectFedora
Versions 22, 23

Weakness classification

CWE-200

References