CVE

Id
65558  
CVE No.
CVE-2013-5611  
Status
Candidate  
Description
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.  
Phase
Assigned (20130826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639681 65558 CVE-2013-5611 CONFIRM:http://www.mozilla.org/security/announce/2013/mfsa2013-105.html  View
639682 65558 CVE-2013-5611 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=771294  View
639683 65558 CVE-2013-5611 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
639684 65558 CVE-2013-5611 FEDORA:FEDORA-2013-23127  View
639685 65558 CVE-2013-5611 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html  View
639686 65558 CVE-2013-5611 FEDORA:FEDORA-2013-23519  View
639687 65558 CVE-2013-5611 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html  View
639688 65558 CVE-2013-5611 SUSE:openSUSE-SU-2014:0008  View
639689 65558 CVE-2013-5611 URL:http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html  View
639690 65558 CVE-2013-5611 SUSE:SUSE-SU-2013:1919  View
639691 65558 CVE-2013-5611 URL:http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html  View
639692 65558 CVE-2013-5611 SUSE:openSUSE-SU-2013:1916  View
639693 65558 CVE-2013-5611 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html  View
639694 65558 CVE-2013-5611 SUSE:openSUSE-SU-2013:1917  View
639695 65558 CVE-2013-5611 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html  View
639696 65558 CVE-2013-5611 SUSE:openSUSE-SU-2013:1918  View
639697 65558 CVE-2013-5611 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html  View
639698 65558 CVE-2013-5611 UBUNTU:USN-2052-1  View
639699 65558 CVE-2013-5611 URL:http://www.ubuntu.com/usn/USN-2052-1  View
639700 65558 CVE-2013-5611 SECTRACK:1029470  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23908 JVNDB-2013-005483 複数の Mozilla 製品の nsEventListenerManager::HandleEventSubType 関数における任意のコードを実行される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の nsEventListenerManager::HandleEventSubType 関数には、mListeners イベントリスナーに関する処理に不備があるため、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-5616 65558 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005483.html  View