CVE-2013-1690

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

CISA Known Exploited Vulnerability

Vendor / Product Mozilla — Firefox and Thunderbird

Date Added 2022-03-28

Remediation Due 2022-04-18

https://nvd.nist.gov/vuln/detail/CVE-2013-1690

Weakness Classification (1)

CWE-119

Affected Software (34)

Vendor	Product	Version
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.04
debian	debian_linux	7.0
mozilla	firefox	< 22.0
mozilla	firefox	17.0 – 17.0.7
mozilla	thunderbird	< 17.0.7
mozilla	thunderbird_esr	17.0 – 17.0.7
opensuse	opensuse	11.4
opensuse	opensuse	12.2
opensuse	opensuse	12.3
redhat	enterprise_linux_desktop	5.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_eus	5.9
redhat	enterprise_linux_eus	6.4
redhat	enterprise_linux_server	5.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	5.9
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_workstation	5.0
redhat	enterprise_linux_workstation	6.0
redhat	gluster_storage_server_for_on-premise	2.0
suse	linux_enterprise_desktop	10
suse	linux_enterprise_desktop	11
suse	linux_enterprise_desktop	11
suse	linux_enterprise_server	10
suse	linux_enterprise_server	11
suse	linux_enterprise_server	11
suse	linux_enterprise_server	11
suse	linux_enterprise_server	11