CVE-2016-7152: Infoleak
First published: Tue Sep 06 2016(Updated: )
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opera | ||
| Apple Mobile Safari | ||
| Firefox | ||
| Microsoft Edge Beta | ||
| Internet Explorer | ||
| Google Chrome (Trace Event) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/
- http://www.securityfocus.com/bid/92769
- http://www.securitytracker.com/id/1036741
- http://www.securitytracker.com/id/1036742
- http://www.securitytracker.com/id/1036743
- http://www.securitytracker.com/id/1036744
- http://www.securitytracker.com/id/1036745
- http://www.securitytracker.com/id/1036746
- https://tom.vg/papers/heist_blackhat2016.pdf
Frequently Asked Questions
What is the severity of CVE-2016-7152?
CVE-2016-7152 is classified as a high severity vulnerability due to its potential to allow attackers to obtain sensitive data.
How do I fix CVE-2016-7152?
To mitigate CVE-2016-7152, users should update their web browsers to the latest versions as they include patches for this vulnerability.
What browsers are affected by CVE-2016-7152?
CVE-2016-7152 affects several browsers including Opera, Apple Mobile Safari, Mozilla Firefox, Microsoft Edge, Internet Explorer, and Google Chrome.
What type of attack does CVE-2016-7152 facilitate?
CVE-2016-7152 facilitates a HEIST attack, which can be used to extract cleartext data from HTTPS pages.
Can CVE-2016-7152 be exploited remotely?
Yes, CVE-2016-7152 can be exploited remotely if the specific browser configurations are in place.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/opera
- canonical/opera
- vendor/apple
- canonical/apple mobile safari
- vendor/mozilla
- canonical/firefox
- vendor/microsoft
- canonical/microsoft edge beta
- canonical/internet explorer
- vendor/google
- canonical/google chrome (trace event)