Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1696
HistoryJun 26, 2013 - 3:19 a.m.

CVE-2013-1696

2013-06-2603:19:10
CWE-264
[email protected]
web.nvd.nist.gov
43
mozilla
firefox
x-frame-options
clickjacking
http server push
cve-2013-1696

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.3%

JSON

Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct clickjacking attacks via a crafted web site that uses the HTTP server push feature with multipart responses.

Affected configurations

NVD
Node
mozillafirefoxRange≤21.0
OR
mozillafirefoxMatch19.0
OR
mozillafirefoxMatch19.0.1
OR
mozillafirefoxMatch19.0.2
OR
mozillafirefoxMatch20.0
OR
mozillafirefoxMatch20.0.1

Related

ubuntucve 1
prion 1
mozilla 1
nvd 1
cvelist 1
seebug 1
openvas 16
suse 3
nessus 13
ubuntu 2
freebsd 1
securityvulns 1
mageia 1
ubuntucve
ubuntucve
CVE-2013-1696
2013-06-25 00:00:00
prion
prion
Design/Logic Flaw
2013-06-26 03:19:00
mozilla
mozilla
X-Frame-Options ignored when using server push with multi-part responses — Mozilla
2013-06-25 00:00:00
nvd
nvd
CVE-2013-1696
2013-06-26 03:19:10
cvelist
cvelist
CVE-2013-1696
2013-06-26 01:00:00
seebug
seebug
Mozilla Firefox 权限许可和访问控制漏洞(CVE-2013-1696)
2013-06-30 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-58) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for regular (openSUSE-SU-2013:1140-1)
2013-11-19 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2013:1176-1)
2013-11-19 00:00:00
suse
suse
update to SeaMonkey 2.19 (important)
2013-07-11 06:04:11
regular updates for Mozilla applications (FF/TB) (important)
2013-07-04 09:04:31
MozillaFirefox: Update to Firefox 22.0 release (important)
2013-07-04 12:04:29
nessus
nessus
Firefox < 22.0 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (b3fcb387-de4b-11e2-b1c6-0025905a4771)
2013-06-27 00:00:00
ubuntu
ubuntu
Firefox regression
2013-07-03 00:00:00
Firefox vulnerabilities
2013-06-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.3%

JSON
Related for CVE-2013-1696
ubuntucve1prion1mozilla1nvd1cvelist1seebug1openvas16suse3nessus13ubuntu2freebsd1securityvulns1mageia1