NVD

Id
37872  
Name
CVE-2013-1709  
Description
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-06  
Modified Date
2017-01-06  
Seq
2013-1709  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193061 37872 CVE-2013-1709 oval:org.mitre.oval:def:18531  View
193062 37872 CVE-2013-1709 DSA-2735  View
193063 37872 CVE-2013-1709 DSA-2746  View
193064 37872 CVE-2013-1709 http://www.mozilla.org/security/announce/2013/mfsa2013-68.html  View
193065 37872 CVE-2013-1709 61867  View
193066 37872 CVE-2013-1709 https://bugzilla.mozilla.org/show_bug.cgi?id=848253  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22097 JVNDB-2013-003672 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 複数の Mozilla 製品は、FRAME 要素と履歴との間の対話処理を適切に処理しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2013-1709 61651 CVE-2013-1709 37872 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003672.html 2013-08-06 2013-10-29 View