Lucene search
Mozilla FoundationMFSA2013-94HistoryOct 29, 2013 - 12:00 a.m.
Spoofing addressbar though SELECT element — Mozilla
2013-10-2900:00:00
Mozilla Foundation
www.mozilla.org
23
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.5%
Security researcher Jordi Chancel discovered a method to put arbitrary HTML content within elements and place it in arbitrary locations. This can be used to spoof the displayed addressbar, leading to clickjacking and other spoofing attacks.
Affected configurations
Node
mozillafirefoxRange<25
ORmozillafirefox_esrRange<24.1
ORmozillaseamonkeyRange<2.22
ORmozillathunderbirdRange<24.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 25 | |
| firefox esr | lt | 24.1 | |
| seamonkey | lt | 2.22 | |
| thunderbird | lt | 24.1 |
Related
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-94) - Linux
2021-11-11 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Nov 2013) - Mac OS X
2013-11-07 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (Nov 2013) - Windows
2013-11-07 00:00:00
nvd
nvd
CVE-2013-5593
2013-10-30 10:55:04
ubuntucve
ubuntucve
CVE-2013-5593
2013-10-29 00:00:00
prion
prion
Hardcoded credentials
2013-10-30 10:55:00
cve
cve
CVE-2013-5593
2013-10-30 10:55:04
cvelist
cvelist
CVE-2013-5593
2013-10-30 10:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2010-1)
2013-11-01 00:00:00
Mozilla Thunderbird < 24.1 Multiple Vulnerabilities
2013-10-31 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2013-10-31 00:00:00
Firefox vulnerabilities
2013-10-29 00:00:00
suse
suse
Mozilla updates 10/2013 (important)
2013-11-07 11:04:15
Mozilla Suite: Update to October 2013 release (important)
2013-11-07 10:04:11
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-11-05 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-10-29 00:00:00
mageia
mageia
Updated iceape packages fix many vulnerabilities
2013-11-21 00:16:49
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.5%
Related for MFSA2013-94