CVE-2017-5928

CVE-2017-5928 maps to a timing-related vulnerability in the W3C High Resolution Time API. The issue arises because memory-reference times can be measured in ways Cited as a “Time to Tick” approach, which bypasses protection mechanisms (e.g., Mozilla’s 1167489#c9) and facilitates AnC-style attacks...

PT-2017-16765

Name of the Vulnerable Software and Affected Versions W3C High Resolution Time API affected versions not specified Description The issue concerns the W3C High Resolution Time API implementation in web browsers, where memory-reference times can be measured using a performance.now "Time to Tick"...

CVE-2017-5928: Undefined Security Weakness

The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/showbug.cgi?id=1167489c9 protection mechanism in place, which makes it...