Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2013-1696

Published: 26/06/2013 Updated: 19/09/2017
CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9
VMScore: 356
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Subscribe to Firefox

Vulnerability Summary

Mozilla Firefox prior to 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote malicious users to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 19.0.1

mozilla firefox 19.0.2

mozilla firefox 20.0

mozilla firefox 20.0.1

mozilla firefox 19.0

mozilla firefox

Vendor Advisories

Ubuntu Security Notice: firefox regression
USN-1890-1 introduced a regression in Firefox ...
Ubuntu Security Notice: firefox vulnerabilities
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Mozilla: X-Frame-Options ignored when using server push with multi-part responses
Mozilla Foundation Security Advisory 2013-58 X-Frame-Options ignored when using server push with multi-part responses Announced June 25, 2013 Reporter Frédéric Buclin Impact Moderate Products Firefox, SeaMonkey Fixed ...
Red Hat: CVE-2013-1696
Mozilla Firefox before 220 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses ...

References

CWE-264https://bugzilla.mozilla.org/show_bug.cgi?id=761667http://www.mozilla.org/security/announce/2013/mfsa2013-58.htmlhttp://www.ubuntu.com/usn/USN-1890-1http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16992https://nvd.nist.govhttps://usn.ubuntu.com/1890-2/https://access.redhat.com/security/cve/cve-2013-1696
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook