Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-5614

Опубликовано: 10 дек. 2013
Источник: redhat
CVSS2: 5.1

Описание

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1039421Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)

5.1 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 11 лет назад

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

nvd
больше 11 лет назад

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

debian
больше 11 лет назад

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly ...

github
около 3 лет назад

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

oracle-oval
больше 11 лет назад

ELSA-2013-1823: thunderbird security update (IMPORTANT)

5.1 Medium

CVSS2