Published: 26/06/2013 Updated: 19/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Mozilla Firefox prior to 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote malicious users to bypass intended access restrictions via a FRAME element within an IFRAME element.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 20.0
mozilla firefox 20.0.1
mozilla firefox
mozilla firefox 19.0.1
mozilla firefox 19.0.2
mozilla firefox 19.0

USN-1890-1 introduced a regression in Firefox ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2013-57 Sandbox restrictions not applied to nested frame elements Announced June 25, 2013 Reporter Bob Owen Impact Low Products Firefox, SeaMonkey Fixed in ...

CWE-264 http://www.mozilla.org/security/announce/2013/mfsa2013-57.html https://bugzilla.mozilla.org/show_bug.cgi?id=849791 http://www.ubuntu.com/usn/USN-1890-1 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16433 https://nvd.nist.gov https://usn.ubuntu.com/1890-2/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1695

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect