CVE

Id
65545  
CVE No.
CVE-2013-5598  
Status
Candidate  
Description
PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRAME element, which allows remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges by using this element within an embedded PDF object.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639392 65545 CVE-2013-5598 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-99.html  View
639393 65545 CVE-2013-5598 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=920515  View
639394 65545 CVE-2013-5598 GENTOO:GLSA-201504-01  View
639395 65545 CVE-2013-5598 URL:https://security.gentoo.org/glsa/201504-01  View
639396 65545 CVE-2013-5598 SUSE:openSUSE-SU-2013:1634  View
639397 65545 CVE-2013-5598 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00006.html  View
639398 65545 CVE-2013-5598 SUSE:openSUSE-SU-2013:1633  View
639399 65545 CVE-2013-5598 URL:http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html  View
639400 65545 CVE-2013-5598 OVAL:oval:org.mitre.oval:def:19133  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23381 JVNDB-2013-004956 複数の Mozilla 製品における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsContentUtils::ContentIsHostIncludingDescendantOf 関数には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-5603 65545 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004956.html  View