CVE-2013-6674

Publication date 19 February 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
thunderbird 13.10 saucy
Fixed 1:24.3.0+build2-0ubuntu0.13.10.1
12.10 quantal
Fixed 1:24.3.0+build2-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 1:24.3.0+build2-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-2119-1
    • Thunderbird vulnerabilities
    • 19 February 2014

Other references