Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-1709

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.

Published

2013-08-07T01:55:04.853

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox 17.0 Yes
Application mozilla firefox 17.0.1 Yes
Application mozilla firefox 17.0.2 Yes
Application mozilla firefox 17.0.3 Yes
Application mozilla firefox 17.0.4 Yes
Application mozilla firefox 17.0.5 Yes
Application mozilla firefox 17.0.6 Yes
Application mozilla firefox 17.0.7 Yes
Application mozilla firefox ≤ 22.0 Yes
Application mozilla firefox 19.0 Yes
Application mozilla firefox 19.0.1 Yes
Application mozilla firefox 19.0.2 Yes
Application mozilla firefox 20.0 Yes
Application mozilla firefox 20.0.1 Yes
Application mozilla firefox 21.0 Yes
Application mozilla thunderbird ≤ 17.0.7 Yes
Application mozilla thunderbird 17.0 Yes
Application mozilla thunderbird 17.0.1 Yes
Application mozilla thunderbird 17.0.2 Yes
Application mozilla thunderbird 17.0.3 Yes
Application mozilla thunderbird 17.0.4 Yes
Application mozilla thunderbird 17.0.5 Yes
Application mozilla thunderbird 17.0.6 Yes
Application mozilla thunderbird_esr 17.0 Yes
Application mozilla thunderbird_esr 17.0.1 Yes
Application mozilla thunderbird_esr 17.0.2 Yes
Application mozilla thunderbird_esr 17.0.3 Yes
Application mozilla thunderbird_esr 17.0.4 Yes
Application mozilla thunderbird_esr 17.0.5 Yes
Application mozilla thunderbird_esr 17.0.6 Yes
Application mozilla thunderbird_esr 17.0.7 Yes
Application mozilla seamonkey ≤ 2.20 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0 Yes
Application mozilla seamonkey 2.0.1 Yes
Application mozilla seamonkey 2.0.2 Yes
Application mozilla seamonkey 2.0.3 Yes
Application mozilla seamonkey 2.0.4 Yes
Application mozilla seamonkey 2.0.5 Yes
Application mozilla seamonkey 2.0.6 Yes
Application mozilla seamonkey 2.0.7 Yes
Application mozilla seamonkey 2.0.8 Yes
Application mozilla seamonkey 2.0.9 Yes
Application mozilla seamonkey 2.0.10 Yes
Application mozilla seamonkey 2.0.11 Yes
Application mozilla seamonkey 2.0.12 Yes
Application mozilla seamonkey 2.0.13 Yes
Application mozilla seamonkey 2.0.14 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.1 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.2 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3 Yes
Application mozilla seamonkey 2.3.1 Yes
Application mozilla seamonkey 2.3.2 Yes
Application mozilla seamonkey 2.3.3 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4 Yes
Application mozilla seamonkey 2.4.1 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.5 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6 Yes
Application mozilla seamonkey 2.6.1 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7 Yes
Application mozilla seamonkey 2.7.1 Yes
Application mozilla seamonkey 2.7.2 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.8 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9 Yes
Application mozilla seamonkey 2.9.1 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10 Yes
Application mozilla seamonkey 2.10.1 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.11 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12 Yes
Application mozilla seamonkey 2.12.1 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13 Yes
Application mozilla seamonkey 2.13.1 Yes
Application mozilla seamonkey 2.13.2 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.14 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15 Yes
Application mozilla seamonkey 2.15.1 Yes
Application mozilla seamonkey 2.15.2 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16 Yes
Application mozilla seamonkey 2.16.1 Yes
Application mozilla seamonkey 2.16.2 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17 Yes
Application mozilla seamonkey 2.17.1 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.18 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.19 Yes
Application mozilla seamonkey 2.20 Yes
Application mozilla seamonkey 2.20 Yes
References