Cloudanix VulnDB

CVE-2013-1690

High · 8.8 CISA KEV

CVSS

8.8

EPSS

69.0%

Published

Jun 26, 2013

CISA due date

Apr 18, 2022

The record

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

Affected packages

Ecosystem Package Introduced Fixed
Debian:7 icedove 0 17.0.7-1~deb7u1
Debian:7 iceweasel 0 17.0.7esr-1~deb7u1
Mageia:2 firefox 0 17.0.7-1.mga2
Mageia:2 firefox-l10n 0 17.0.7-1.mga2
Mageia:2 iceape 0 2.22-1.mga2
Mageia:2 thunderbird 0 17.0.7-1.mga2
Mageia:2 thunderbird-l10n 0 17.0.7-1.mga2
Mageia:3 firefox 0 17.0.7-1.mga3
Mageia:3 firefox-l10n 0 17.0.7-1.mga3
Mageia:3 iceape 0 2.22-1.mga3
Mageia:3 thunderbird 0 17.0.7-1.mga3
Mageia:3 thunderbird-l10n 0 17.0.7-1.mga3
Red Hat:enterprise_linux:5::server firefox 0 0:17.0.7-1.el5_9
Red Hat:enterprise_linux:5::server firefox-debuginfo 0 0:17.0.7-1.el5_9
Red Hat:enterprise_linux:5::server xulrunner 0 0:17.0.7-1.el5_9
Red Hat:enterprise_linux:5::server xulrunner-debuginfo 0 0:17.0.7-1.el5_9
Red Hat:enterprise_linux:5::server xulrunner-devel 0 0:17.0.7-1.el5_9
Red Hat:enterprise_linux:6::client firefox 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client firefox-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client thunderbird 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client thunderbird-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client xulrunner 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client xulrunner-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::client xulrunner-devel 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::computenode firefox 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::computenode firefox-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::computenode xulrunner 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::computenode xulrunner-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::computenode xulrunner-devel 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server firefox 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server firefox-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server thunderbird 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server thunderbird-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server xulrunner 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server xulrunner-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::server xulrunner-devel 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation firefox 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation firefox-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation thunderbird 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation thunderbird-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation xulrunner 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation xulrunner-debuginfo 0 0:17.0.7-1.el6_4
Red Hat:enterprise_linux:6::workstation xulrunner-devel 0 0:17.0.7-1.el6_4
Red Hat:rhel_productivity:5 thunderbird 0 0:17.0.7-1.el5_9
Red Hat:rhel_productivity:5 thunderbird-debuginfo 0 0:17.0.7-1.el5_9
openSUSE:Tumbleweed MozillaFirefox 0 50.1.0-1.1
openSUSE:Tumbleweed MozillaThunderbird 0 45.5.1-1.1
openSUSE:Tumbleweed firefox-esr 0 128.5.1-1.1

Related vulnerabilities