VDB

CVE-2013-5614

CVE-2013-5614 PUBLISHED

Reported by mozilla · Published December 11, 2013

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

Affected Products

VendorProductVersions
n/an/an/a
n/an/a*, n/a, n/a

Timeline

  • Dec 11, 2013 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 13, 2022 CVE Updated
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 27, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Feb 10, 2023 EPSS Score
  • Apr 4, 2023 EPSS Score
  • May 27, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›