CVE-2013-1690

HIGHCISA KEV

8.8

Beschreibung

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

CVE Details

CVSS v3.1 Bewertung8.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht6/26/2013

Zuletzt geandert4/22/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerMozilla

ProduktFirefox and Thunderbird

SchwachstellennameMozilla Firefox and Thunderbird Denial-of-Service Vulnerability

KEV Aufnahmedatum2022-03-28

Behebungsfrist2022-04-18

Ransomware-NutzungUnknown

Betroffene Produkte

canonical:ubuntu_linuxdebian:debian_linuxmozilla:firefoxmozilla:thunderbirdmozilla:thunderbird_esropensuse:opensuseredhat:enterprise_linux_desktopredhat:enterprise_linux_eusredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_workstationredhat:gluster_storage_server_for_on-premisesuse:linux_enterprise_desktopsuse:linux_enterprise_serversuse:linux_enterprise_software_development_kit

Schwachen (CWE)

CWE-119CWE-119

Referenzen

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2716(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2720(security@mozilla.org)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(security@mozilla.org)

http://www.securityfocus.com/bid/60778(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1890-1(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1891-1(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(security@mozilla.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2716(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2720(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/60778(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1890-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1891-1(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.