NVD

Id
37859  
Name
CVE-2013-1695  
Description
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element, which allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-06-25  
Modified Date
2013-11-02  
Seq
2013-1695  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192983 37859 CVE-2013-1695 openSUSE-SU-2013:1140  View
192984 37859 CVE-2013-1695 openSUSE-SU-2013:1142  View
192985 37859 CVE-2013-1695 oval:org.mitre.oval:def:16433  View
192986 37859 CVE-2013-1695 http://www.mozilla.org/security/announce/2013/mfsa2013-57.html  View
192987 37859 CVE-2013-1695 USN-1890-1  View
192988 37859 CVE-2013-1695 https://bugzilla.mozilla.org/show_bug.cgi?id=849791  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21556 JVNDB-2013-003131 Mozilla Firefox におけるアクセス制限を回避される脆弱性 Mozilla Firefox は、IFRAME 要素のサンドボックス属性に対する特定の DocShell の継承動作を適切に実装していないため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-1695 61637 CVE-2013-1695 37859 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003131.html 2013-06-25 2013-07-05 View