CVE-2014-1552

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to…

published July 23, 2014

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01257 · 69.3th percentile
Published
2014-07-23T10:00Z
EPSS history
Timeline
  • 23 JUL 10:00Z
    Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to…
    cvelistv5