CVE

Id
65540  
CVE No.
CVE-2013-5593  
Status
Candidate  
Description
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639334 65540 CVE-2013-5593 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-94.html  View
639335 65540 CVE-2013-5593 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=868327  View
639336 65540 CVE-2013-5593 GENTOO:GLSA-201504-01  View
639337 65540 CVE-2013-5593 URL:https://security.gentoo.org/glsa/201504-01  View
639338 65540 CVE-2013-5593 SUSE:openSUSE-SU-2013:1634  View
639339 65540 CVE-2013-5593 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html  View
639340 65540 CVE-2013-5593 SUSE:openSUSE-SU-2013:1633  View
639341 65540 CVE-2013-5593 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html  View
639342 65540 CVE-2013-5593 OVAL:oval:org.mitre.oval:def:19263  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23376 JVNDB-2013-004951 Mozilla Firefox の PDF.js における任意のファイルを読まれる脆弱性 Mozilla Firefox の PDF.js は、IFRAME 要素の追加を適切に処理しないため、任意のファイルを読まれる、またはクローム特権で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2013-5598 65540 8.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004951.html  View