General Information

Cross-Domain Search Timing

Variants:
Direct 

Also Known As:
Pixel Perfect Timing Attacks

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Web Application

Affected Mechanisms:
Information Disclosure Prevention

Invented In:
08/05/2007

Added In:
25/12/2014


Vector Operation Method:
Identify states in cross site targets by measuring response time of cross domain referrals.


Direct Variant:

Cross-Domain Search Timing

Also Known As:
Pixel Perfect Timing Attacks

Typical Severity:
Minor

Learn More: