CVE

Id
61674  
CVE No.
CVE-2013-1727  
Status
Candidate  
Description
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file.  
Phase
Assigned (20130213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617448 61674 CVE-2013-1727 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-84.html  View
617449 61674 CVE-2013-1727 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=782581  View
617450 61674 CVE-2013-1727 FEDORA:FEDORA-2013-16992  View
617451 61674 CVE-2013-1727 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html  View
617452 61674 CVE-2013-1727 FEDORA:FEDORA-2013-17047  View
617453 61674 CVE-2013-1727 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html  View
617454 61674 CVE-2013-1727 FEDORA:FEDORA-2013-17074  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22631 JVNDB-2013-004206 複数の Mozilla 製品におけるバッファオーバーフローの脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsFloatManager::GetFlowArea 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-1732 61674 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004206.html  View