4.3

CVE-2013-5614

EPSS 2.35%
Veröffentlicht 11.12.2013 15:55:12
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 18

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 26.0

Mozilla ≫ Seamonkey Version < 2.23

Fedoraproject ≫ Fedora Version 19

Fedoraproject ≫ Fedora Version 20

Oracle ≫ Solaris Version 11.3

Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 12.10

Canonical ≫ Ubuntu Linux Version 13.04

Canonical ≫ Ubuntu Linux Version 13.10

Redhat ≫ Enterprise Linux Desktop Version 5.0

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Eus Version 6.5

Redhat ≫ Enterprise Linux Server Version 5.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Aus Version 6.5

Redhat ≫ Enterprise Linux Server Eus Version 6.5

Redhat ≫ Enterprise Linux Server Tus Version 6.5

Redhat ≫ Enterprise Linux Workstation Version 5.0

Redhat ≫ Enterprise Linux Workstation Version 6.0

Opensuse ≫ Opensuse Version 12.2

Opensuse ≫ Opensuse Version 12.3

Opensuse ≫ Opensuse Version 13.1

Suse ≫ Linux Enterprise Desktop Version 11 Update sp3

Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform -

Suse ≫ Linux Enterprise Server Version 11 Update sp3 SwPlatform vmware

Suse ≫ Linux Enterprise Software Development Kit Version 11 Update sp3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.35%	0.815

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-1021 Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1812.html

Third Party Advisory

https://security.gentoo.org/glsa/201504-01

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html

Third Party Advisory

Mailing List

http://www.securitytracker.com/id/1029470

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1029476

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-2052-1

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html

Third Party Advisory

Mailing List

http://www.mozilla.org/security/announce/2013/mfsa2013-107.html

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=886262

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2013-5614

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5614

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5614

EUVD