CVE-2013-1695

2013-06-2500:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.6%

JSON

Mozilla Firefox before 22.0 does not properly implement certain DocShell
inheritance behavior for the sandbox attribute of an IFRAME element, which
allows remote attackers to bypass intended access restrictions via a FRAME
element within an IFRAME element.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 22.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 22.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 22.0+build1-0ubuntu0.13.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 22.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 22.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	firefox	< 22.0+build1-0ubuntu0.13.04.1	UNKNOWN