Lucene search
Mozilla FoundationMFSA2013-57HistoryJun 25, 2013 - 12:00 a.m.
Sandbox restrictions not applied to nested frame elements — Mozilla
2013-06-2500:00:00
Mozilla Foundation
www.mozilla.org
22
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
78.6%
Mozilla community member Bob Owen reported that restrictions are not applied to a frame element contained within a sandboxed iframe. As a result, content hosted within a sandboxed iframe could use a frame element to bypass the restrictions that should be applied.
Affected configurations
Node
mozillafirefoxRange<22
ORmozillaseamonkeyRange<2.19
Related
cvelist
cvelist
CVE-2013-1695
2013-06-26 01:00:00
nvd
nvd
CVE-2013-1695
2013-06-26 03:19:10
prion
prion
Design/Logic Flaw
2013-06-26 03:19:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-57) - Linux
2021-11-11 00:00:00
Ubuntu: Security Advisory (USN-1890-2)
2013-07-05 00:00:00
SuSE Update for regular openSUSE-SU-2013:1140-1 (regular)
2013-11-19 00:00:00
cve
cve
CVE-2013-1695
2013-06-26 03:19:10
ubuntucve
ubuntucve
CVE-2013-1695
2013-06-25 00:00:00
suse
suse
update to SeaMonkey 2.19 (important)
2013-07-11 06:04:11
regular updates for Mozilla applications (FF/TB) (important)
2013-07-04 09:04:31
MozillaFirefox: Update to Firefox 22.0 release (important)
2013-07-04 12:04:29
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1890-1)
2013-06-27 00:00:00
Firefox < 22.0 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2013-06-26 00:00:00
Firefox regression
2013-07-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.006 Low
EPSS
Percentile
78.6%
Related for MFSA2013-57