CVE-2013-1690

HIGHCISA KEV

8.8

Description

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published6/26/2013

Last Modified4/22/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorMozilla

ProductFirefox and Thunderbird

Vulnerability NameMozilla Firefox and Thunderbird Denial-of-Service Vulnerability

KEV Date Added2022-03-28

Remediation Due Date2022-04-18

Ransomware UseUnknown

Affected Products

canonical:ubuntu_linuxdebian:debian_linuxmozilla:firefoxmozilla:thunderbirdmozilla:thunderbird_esropensuse:opensuseredhat:enterprise_linux_desktopredhat:enterprise_linux_eusredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_workstationredhat:gluster_storage_server_for_on-premisesuse:linux_enterprise_desktopsuse:linux_enterprise_serversuse:linux_enterprise_software_development_kit

Weaknesses (CWE)

CWE-119CWE-119

References

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(security@mozilla.org)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2716(security@mozilla.org)

http://www.debian.org/security/2013/dsa-2720(security@mozilla.org)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(security@mozilla.org)

http://www.securityfocus.com/bid/60778(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1890-1(security@mozilla.org)

http://www.ubuntu.com/usn/USN-1891-1(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(security@mozilla.org)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(security@mozilla.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(security@mozilla.org)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0981.html(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2013-0982.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2716(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2720(af854a3a-2127-422b-91ae-364da2661108)

http://www.mozilla.org/security/announce/2013/mfsa2013-53.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/60778(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1890-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1891-1(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=857883(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.mozilla.org/show_bug.cgi?id=901365(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.