CVE-2017-5928 - CVE House
Back to Database
Status published Low CVE-2017-5928

The W3C High Resolution Time API, as implemented in various...

Vulnerability Description

The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 protection mechanism in place, which makes it easier for remote attackers to conduct AnC attacks via crafted JavaScript code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5928

Credits & Attribution

No credits recorded in the NVD database.

References

More from w3

View All →
CVE-2009-1209
Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows...
Critical 9.3
CVE-2009-0323
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0...
Critical 10

Affected Vendor

Affected Software

high resolution time api
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 27th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.