← CVE Radar
CVE-2013-1690Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
8.8 HIGHEPSS 69.02%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Apr 18, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2013-1690
- Status
- Analyzed
- Assigner (CNA)
- mozilla
- Published
- Jun 26, 2013
- Last modified
- 2026-06-16 23:51 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
mozillafirefox2 version ranges
- before 22.0
- 17.0 before 17.0.7
mozillathunderbird1 version range
- before 17.0.7
mozillathunderbird esr1 version range
- 17.0 before 17.0.7
canonicalubuntu linux3 version ranges
- 12.04
- 12.10
- 13.04
debiandebian linux1 version range
- 7.0
redhatgluster storage server for on-premise1 version range
- 2.0
redhatenterprise linux desktop2 version ranges
- 5.0
- 6.0
redhatenterprise linux eus2 version ranges
- 5.9
- 6.4
redhatenterprise linux server2 version ranges
- 5.0
- 6.0
redhatenterprise linux server aus2 version ranges
- 5.9
- 6.4
redhatenterprise linux workstation2 version ranges
- 5.0
- 6.0
opensuseopensuse3 version ranges
- 11.4
- 12.2
- 12.3
suselinux enterprise desktop3 version ranges
- 10 sp4
- 11 sp2
- 11 sp3
suselinux enterprise server4 version ranges
- 10 sp4
- 11 sp1
- 11 sp2
- 11 sp3
suselinux enterprise software development kit2 version ranges
- 10 sp4
- 11 sp3
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-0981.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-0982.html
- debian.org http://www.debian.org/security/2013/dsa-2716
- debian.org http://www.debian.org/security/2013/dsa-2720
- mozilla.org http://www.mozilla.org/security/announce/2013/mfsa2013-53.html
- securityfocus.com http://www.securityfocus.com/bid/60778
- ubuntu.com http://www.ubuntu.com/usn/USN-1890-1
- ubuntu.com http://www.ubuntu.com/usn/USN-1891-1
- bugzilla.mozilla.org https://bugzilla.mozilla.org/show_bug.cgi?id=857883
- bugzilla.mozilla.org https://bugzilla.mozilla.org/show_bug.cgi?id=901365
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690