NuytsTech Security

CVE-2014-1552

by ·

Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.

Date published : 2014-07-23

http://www.mozilla.org/security/announce/2014/mfsa2014-66.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Tags: