| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 30.0 | |
| thunderbird | = 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5= 24.6≤ 24.7 |
Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-origin content via a crafted web site in conjunction with a redirect.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free