description: An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
problem types: Insufficient timing side-channel resistance in divSpoiler
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 45.5, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 45.5, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 50, status: affected, version: unspecified, versionType: custom
}
