CVE catalog

CVE-2013-1709

iceweasel - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.33% · Oct 25, 2026

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving spoofing a relative location in a previously visited document.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianiceweasel710.0.12esr-1vulnerable
Debianiceweasel710.0.12esr-1+alphavulnerable
Debianiceweasel710.0.12esr-1+nmu1vulnerable
Debianiceweasel710.0.12esr-1+nmu1+alphavulnerable
Debianiceweasel711.0-1vulnerable
Debianiceweasel711.0-2vulnerable
Debianiceweasel711.0-3vulnerable
Debianiceweasel711.0-4vulnerable
Debianiceweasel711.0~b1-1vulnerable
Debianiceweasel711.0~b1-2vulnerable
Debianiceweasel711.0~b2-1vulnerable
Debianiceweasel711.0~b3-1vulnerable
Debianiceweasel711.0~b4-1vulnerable
Debianiceweasel711.0~b5-1vulnerable
Debianiceweasel711.0~b6-1vulnerable
Debianiceweasel712.0-1vulnerable
Debianiceweasel712.0-2vulnerable
Debianiceweasel712.0-3vulnerable
Debianiceweasel712.0-4vulnerable
Debianiceweasel712.0-5vulnerable
Debianiceweasel712.0-6vulnerable
Debianiceweasel712.0-7vulnerable
Debianiceweasel713.0-1vulnerable
Debianiceweasel713.0.1-1vulnerable
Debianiceweasel713.0.1-2vulnerable
Debianiceweasel714.0.1-1vulnerable
Debianiceweasel714.0.1-2vulnerable
Debianiceweasel715.0-1vulnerable
Debianiceweasel715.0.1-1vulnerable
Debianiceweasel716.0-1vulnerable
Debianiceweasel716.0.1-1vulnerable
Debianiceweasel716.0.2-1vulnerable
Debianiceweasel717.0-1vulnerable
Debianiceweasel717.0.1-1vulnerable
Debianiceweasel717.0.1-2vulnerable
Debianiceweasel717.0.5esr-1vulnerable
Debianiceweasel717.0.6esr-1vulnerable
Debianiceweasel717.0.6esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-1vulnerable
Debianiceweasel717.0.7esr-1~deb7u1vulnerable
Debianiceweasel717.0.7esr-2vulnerable
Debianiceweasel717.0.8esr-1~deb7u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianiceweaseldeb717.0.8esr-1~deb7u1Not reportedDSA-2735-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]