CVE

Id
68847  
CVE No.
CVE-2014-1552  
Status
Candidate  
Description
Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.  
Phase
Assigned (20140116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
661952 68847 CVE-2014-1552 CONFIRM:http://www.mozilla.org/security/announce/2014/mfsa2014-66.html  View
661953 68847 CVE-2014-1552 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=985135  View
661954 68847 CVE-2014-1552 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
661955 68847 CVE-2014-1552 GENTOO:GLSA-201504-01  View
661956 68847 CVE-2014-1552 URL:https://security.gentoo.org/glsa/201504-01  View
661957 68847 CVE-2014-1552 SECTRACK:1030619  View
661958 68847 CVE-2014-1552 URL:http://www.securitytracker.com/id/1030619  View
661959 68847 CVE-2014-1552 SECTRACK:1030620  View
661960 68847 CVE-2014-1552 URL:http://www.securitytracker.com/id/1030620  View
661961 68847 CVE-2014-1552 SECUNIA:59760  View
661962 68847 CVE-2014-1552 URL:http://secunia.com/advisories/59760  View
661963 68847 CVE-2014-1552 SECUNIA:60628  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14664 JVNDB-2014-003539 Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird には、サービス運用妨害 (X.509 証明書の構文解析停止) 状態にされる脆弱性が存在します。 CVE-2014-1560 68847 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003539.html  View