Lucene search
Mozilla FoundationMFSA2013-58HistoryJun 25, 2013 - 12:00 a.m.
X-Frame-Options ignored when using server push with multi-part responses — Mozilla
2013-06-2500:00:00
Mozilla Foundation
www.mozilla.org
15
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.008 Low
EPSS
Percentile
82.3%
Bugzilla developer Frédéric Buclin reported that the X-Frame-Options header is ignored when server push is used in multi-part responses. This can lead to potential clickjacking on sites that use X-Frame-Options as a protection.
Affected configurations
Node
mozillafirefoxRange<22
ORmozillaseamonkeyRange<2.19
Related
cve
cve
CVE-2013-1696
2013-06-26 03:19:10
prion
prion
Design/Logic Flaw
2013-06-26 03:19:00
nvd
nvd
CVE-2013-1696
2013-06-26 03:19:10
ubuntucve
ubuntucve
CVE-2013-1696
2013-06-25 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-58) - Linux
2021-11-11 00:00:00
SuSE Update for regular openSUSE-SU-2013:1140-1 (regular)
2013-11-19 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2013:1176-1)
2013-11-19 00:00:00
seebug
seebug
Mozilla Firefox 权限许可和访问控制漏洞(CVE-2013-1696)
2013-06-30 00:00:00
cvelist
cvelist
CVE-2013-1696
2013-06-26 01:00:00
suse
suse
update to SeaMonkey 2.19 (important)
2013-07-11 06:04:11
regular updates for Mozilla applications (FF/TB) (important)
2013-07-04 09:04:31
MozillaFirefox: Update to Firefox 22.0 release (important)
2013-07-04 12:04:29
nessus
nessus
Firefox < 22.0 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1142-1)
2014-06-13 00:00:00
ubuntu
ubuntu
Firefox regression
2013-07-03 00:00:00
Firefox vulnerabilities
2013-06-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
0.008 Low
EPSS
Percentile
82.3%
Related for MFSA2013-58