CVE-2016-5250: Infoleak
Last updated 24 July 2024
Other sources
Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 ...
— Debian
URLs of resources loaded after a navigation started can leak to the following page through the Resource Timing API, leading to potential information disclosure.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2016-5250?
CVE-2016-5250 is a vulnerability that allows remote attackers to obtain sensitive information about previously retrieved webpages in Mozilla Firefox, Firefox ESR, and Thunderbird.
What is the severity of CVE-2016-5250?
CVE-2016-5250 has a severity level of medium.
How can remote attackers exploit CVE-2016-5250?
Remote attackers can exploit CVE-2016-5250 by making Resource Timing API calls to obtain sensitive information about previously loaded webpages.
Which versions of Mozilla Firefox and Thunderbird are affected?
Mozilla Firefox before version 48.0, Firefox ESR before version 45.4, and Thunderbird before version 45.4 are affected by CVE-2016-5250.
How can I fix CVE-2016-5250?
To fix CVE-2016-5250, it is recommended to update Mozilla Firefox, Firefox ESR, and Thunderbird to version 48.0, 45.4, and 45.4 respectively.