The host is installed with Google Chrome 15 or earlier or Apple Safari 5.1.1 or earlier and is prone to an information disclosure vulnerability. A flaw is present in the applications, which fail to prevent capture of data about the time required for image loading. Successful exploitation could allow attackers to determine whether an image exists in the browser cache via crafted JavaScript code.