Beveiligingsadvies

CVE-2016-9077

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-11 21:00:00
Laatst bijgewerkt 2024-08-06 02:42:10
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on the input pixel, allowing for timing attacks when the images are loaded from third party locations. This vulnerability affects Firefox < 50.