Vulnetix
Try Vulnetix Request Demo
CVE-2011-4688 PUBLISHED CVSS 5 MEDIUM

Mozilla Firefox 8.0.1 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

EPSS 0.24% · 47.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.24%
47.2th percentile

Affected Products

VendorProductVersions
mozillafirefox0, 8.0
n/an/an/a

Timeline

References

Open in Interactive Console →