CVE-2013-1690

HIGHCISA KEV

8.8

Descripcion

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

Detalles CVE

Puntuacion CVSS v3.18.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado6/26/2013

Ultima modificacion4/22/2026

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorMozilla

ProductoFirefox and Thunderbird

Nombre vulnerabilidadMozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Fecha inclusion KEV2022-03-28

Fecha limite remediacion2022-04-18

Uso en ransomwareUnknown

Productos afectados

canonical:ubuntu_linuxdebian:debian_linuxmozilla:firefoxmozilla:thunderbirdmozilla:thunderbird_esropensuse:opensuseredhat:enterprise_linux_desktopredhat:enterprise_linux_eusredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_workstationredhat:gluster_storage_server_for_on-premisesuse:linux_enterprise_desktopsuse:linux_enterprise_serversuse:linux_enterprise_software_development_kit

Debilidades (CWE)

CWE-119CWE-119

Referencias

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2716(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2720(security@mozilla.org)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(security@mozilla.org)

http://www.securityfocus.com/bid/60778(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1890-1(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1891-1(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(security@mozilla.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2716(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2720(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/60778(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1890-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1891-1(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.