CVEvulnerability
CVE-2013-1695
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-06-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.
Affected configurations
• mozilla firefox (<= 21.0)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-57.html Vendor Advisory
- http://www.ubuntu.com/usn/USN-1890-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=849791 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16433 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html lists.opensuse.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-57.html Vendor Advisory
- http://www.ubuntu.com/usn/USN-1890-1 www.ubuntu.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=849791 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16433 oval.cisecurity.org