CVEvulnerability
CVE-2014-1552
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
Affected configurations
• mozilla firefox (<= 30.0)
• mozilla thunderbird (<= 24.7)
• mozilla thunderbird 24.0
• mozilla thunderbird 24.0.1
• mozilla thunderbird 24.1
• mozilla thunderbird 24.1.1
• mozilla thunderbird 24.2
• mozilla thunderbird 24.3
• mozilla thunderbird 24.4
• mozilla thunderbird 24.5
• mozilla thunderbird 24.6
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/59760 secunia.com
- http://secunia.com/advisories/60628 secunia.com
- http://www.mozilla.org/security/announce/2014/mfsa2014-66.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securitytracker.com/id/1030619 www.securitytracker.com
- http://www.securitytracker.com/id/1030620 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=985135 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://secunia.com/advisories/59760 secunia.com
- http://secunia.com/advisories/60628 secunia.com
- http://www.mozilla.org/security/announce/2014/mfsa2014-66.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securitytracker.com/id/1030619 www.securitytracker.com
- http://www.securitytracker.com/id/1030620 www.securitytracker.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=985135 bugzilla.mozilla.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org