Lucene search
Veracode Vulnerability DatabaseVERACODE:27957HistoryNov 20, 2020 - 10:23 a.m.
Information Disclosure
2020-11-2010:23:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
firefox
vulnerability
information disclosure
transparent image
cross-origin
skia library
drawimage function
timing side-channel attacks
software
EPSS
0.001
Percentile
50.4%
firefox is vulnerable to information disclosure. When drawing a transparent image on top of an unknown cross-origin image, the Skia library drawImage function takes a variable amount of time depending on the content of the underlying image. This can result in potential cross-origin information exposure of image content through timing side-channel attacks.
Related
cvelist
cvelist
CVE-2020-16012
2021-01-08 17:48:32
ubuntucve
ubuntucve
CVE-2020-16012
2020-11-17 00:00:00
prion
prion
Design/Logic Flaw
2021-01-08 19:15:00
githubexploit
githubexploit
Exploit for Vulnerability in Google Chrome
2020-11-14 21:32:15
debiancve
debiancve
CVE-2020-16012
2021-01-08 19:15:12
cve
cve
CVE-2020-16012
2021-01-08 19:15:12
redhatcve
redhatcve
CVE-2020-16012
2020-11-18 01:08:57
alpinelinux
alpinelinux
CVE-2020-16012
2021-01-08 19:15:12
nvd
nvd
CVE-2020-16012
2021-01-08 19:15:12
nessus
nessus
RHEL 6 : thunderbird (RHSA-2020:5238)
2020-11-30 00:00:00
RHEL 8 : thunderbird (RHSA-2020:5231)
2020-11-30 00:00:00
RHEL 8 : thunderbird (RHSA-2020:5240)
2020-11-30 00:00:00
debian
debian
[SECURITY] [DLA 2464-1] thunderbird security update
2020-11-23 09:55:28
[SECURITY] [DLA 2457-1] firefox-esr security update
2020-11-19 10:07:14
[SECURITY] [DSA 4793-1] firefox-esr security update
2020-11-18 18:44:22
openvas
openvas
Debian: Security Advisory (DSA-4793-1)
2020-11-20 00:00:00
Mageia: Security Advisory (MGASA-2020-0427)
2022-01-28 00:00:00
centos
centos
thunderbird security update
2020-12-09 20:24:41
firefox security update
2020-12-09 20:21:57
oraclelinux
oraclelinux
thunderbird security update
2020-12-01 00:00:00
thunderbird security update
2020-12-01 00:00:00
firefox security update
2020-12-01 00:00:00
redhat
redhat
(RHSA-2020:5239) Important: firefox security update
2020-11-30 08:20:12
(RHSA-2020:5232) Important: thunderbird security update
2020-11-30 08:15:49
(RHSA-2020:5236) Important: thunderbird security update
2020-11-30 08:18:50
osv
osv
firefox-esr - security update
2020-11-19 00:00:00
firefox-esr - security update
2020-11-18 00:00:00
thunderbird - security update
2020-11-23 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-12-07 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2020-12-07 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-11-21 15:21:00
Updated firefox and nss packages fix security vulnerabilities
2020-11-19 11:52:41
ibm
ibm
suse
suse
Security update for MozillaThunderbird (important)
2020-12-07 00:00:00
Security update for MozillaFirefox (important)
2020-11-26 00:00:00
Security update for MozillaFirefox (important)
2020-11-26 00:00:00
kaspersky
kaspersky
KLA12012 Multiple vulnerabilities in Mozilla Thunderbird
2020-11-17 00:00:00
KLA12010 Multiple vulnerabilities in Mozilla Firefox
2020-11-17 00:00:00
KLA12011 Multiple vulnerabilities in Mozilla Firefox ESR
2020-11-17 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 78.5 — Mozilla
2020-11-17 00:00:00
Security Vulnerabilities fixed in Thunderbird 78.5 — Mozilla
2020-11-17 00:00:00
Security Vulnerabilities fixed in Firefox 83 — Mozilla
2020-11-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1
2020-11-16 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1
2020-11-19 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2020-11-25 00:00:00
Firefox vulnerabilities
2020-11-19 00:00:00
Firefox vulnerabilities
2020-11-18 00:00:00
archlinux
archlinux
[ASA-202011-12] firefox: multiple issues
2020-11-17 00:00:00
[ASA-202011-11] chromium: multiple issues
2020-11-17 00:00:00
amazon
amazon
Important: thunderbird
2021-01-05 23:35:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-87.0.4280.66-1.fc33
2020-11-22 01:27:45
[SECURITY] Fedora 32 Update: chromium-87.0.4280.66-1.fc32
2020-11-24 01:23:14
chrome
chrome
Stable Channel Update for Desktop
2020-11-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00