NVD

Id
40868  
Name
CVE-2013-5593  
Description
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct clickjacking attacks via vectors that trigger navigation off of a page containing this element.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-10-30  
Modified Date
2016-12-21  
Seq
2013-5593  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206476 40868 CVE-2013-5593 openSUSE-SU-2013:1633  View
206477 40868 CVE-2013-5593 openSUSE-SU-2013:1634  View
206478 40868 CVE-2013-5593 oval:org.mitre.oval:def:19263  View
206479 40868 CVE-2013-5593 http://www.mozilla.org/security/announce/2013/mfsa2013-94.html  View
206480 40868 CVE-2013-5593 https://bugzilla.mozilla.org/show_bug.cgi?id=868327  View
206481 40868 CVE-2013-5593 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23372 JVNDB-2013-004947 複数の Mozilla 製品の SELECT 要素の実装におけるアドレスバーを偽装される脆弱性 Mozilla Firefox、Thunderbird、および SeaMonkey の SELECT 要素の実装は、ドロップダウンメニュー内の HTML の性質または配置を適切に制限しないため、アドレスバーを偽装される、またはクリックジャッキング攻撃を実行される脆弱性が存在します。 CVE-2013-5593 65535 CVE-2013-5593 40868 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004947.html 2013-10-29 2013-12-05 View