RSS   Vulnerabilities for 'Tor browser'   RSS

2019-06-30
 
CVE-2019-13075

CWE-200
 

 
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.

 
2019-05-27
 
CVE-2019-12383

CWE-200
 

 
Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting.

 
2018-09-14
 
CVE-2017-16639

CWE-200
 

 
Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.

 
2018-09-13
 
CVE-2018-16983

CWE-noinfo
 

 
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.

 

 >>> Vendor: Torproject 2 Products
TOR
Tor browser


Copyright 2024, cxsecurity.com

 

Back to Top