VULNERABILITY INTELLIGENCE
CVE-2013-5614
CVSS score4.3 MEDIUM
EPSS probability2.35%
CISA KEVNot currently listed
Published2013-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
Weakness classification
- CWE-1021: Improper Restriction of Rendered UI Layers or Frames
Primary references
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory, VDB Entry
- security@mozilla.org — Third Party Advisory, VDB Entry