Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-5614
HistoryDec 11, 2013 - 12:00 a.m.

CVE-2013-5614

2013-12-1100:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.2%

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly
consider the sandbox attribute of an IFRAME element during processing of a
contained OBJECT element, which allows remote attackers to bypass intended
sandbox restrictions via a crafted web site.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 26.0+build2-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchfirefox< 26.0+build2-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchfirefox< 26.0+build2-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchfirefox< 26.0+build2-0ubuntu0.13.10.2UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.2%