Lucene search
MozillaCVELIST:CVE-2013-5593HistoryOct 30, 2013 - 10:00 a.m.
CVE-2013-5593
2013-10-3010:00:00
mozilla
www.cve.org
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.
References
lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html
lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html
www.mozilla.org/security/announce/2013/mfsa2013-94.html
bugzilla.mozilla.org/show_bug.cgi?id=868327
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19263
security.gentoo.org/glsa/201504-01
Related
mozilla
mozilla
Spoofing addressbar though SELECT element — Mozilla
2013-10-29 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-94) - Linux
2021-11-11 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Nov 2013) - Mac OS X
2013-11-07 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Nov 2013) - Windows
2013-11-07 00:00:00
prion
prion
Hardcoded credentials
2013-10-30 10:55:00
cve
cve
CVE-2013-5593
2013-10-30 10:55:04
nvd
nvd
CVE-2013-5593
2013-10-30 10:55:04
ubuntucve
ubuntucve
CVE-2013-5593
2013-10-29 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-10-31 00:00:00
Firefox vulnerabilities
2013-10-29 00:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2010-1)
2013-11-01 00:00:00
Mozilla Thunderbird < 24.1 Multiple Vulnerabilities
2013-10-31 00:00:00
openSUSE Security Update : seamonkey (openSUSE-SU-2013:1788-1)
2014-06-13 00:00:00
suse
suse
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00