CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-1690

Weakness behind it

CISA records this vulnerability as an instance of CWE-119. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1690
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog