CVE-2016-7152 Information disclosure in n/a
Remote attackers can obtain cleartext data via the HEIST attack by leveraging TCP congestion window information in HTTPS when third-party cookies are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-7152?
CVE-2016-7152 is a medium-severity vulnerability in Apple Safari, published on 6 Sep 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.
Weakness: CWE-200
Which versions are affected by CVE-2016-7152?
It affects 6 products.
Products include Apple Safari, Google Chrome, Microsoft Edge, Microsoft Internet Explorer, Mozilla Firefox, Opera Opera.
How do I fix CVE-2016-7152?
No fix has been published for CVE-2016-7152 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-7152 being exploited?
There is no known exploitation of CVE-2016-7152 in the wild and no public exploit code.
Other vulnerabilities in Apple Safari
Sources
Also known as GHSA-gj46-mfx7-2vwx, UBUNTU-CVE-2016-7152.