CVE-2013-1690highunder attackCWE-119

CVE-2013-1690

Published · Updated

Follow this CVE+ Monitor Firefox+ Monitor Thunderbird

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

98Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.8epss 69%
from disclosure to weapon43 days
Published on NVDJun 26
1st PoC+43d
metasploitJun 25
CISA KEV+3197d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product
Red Hat Enterprise Linux 5
none_available: Affected
Fixed
9 products (140 components)
Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server Optional (v. 6) · Red Hat Enterprise Linux Desktop (v. 6) · Red Hat Enterprise Linux Workstation (v. 6) · and others 4
fix ↗
Action required by CISAfederal deadline: 2022-04-18

Apply updates per vendor instructions.

In short

Firefox and Thunderbird do not properly handle page reloading events, allowing a malicious website to crash the application or potentially run unauthorized code by triggering access to invalid memory locations.

Technical detail

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer. The vulnerability exists in the handling of onreadystatechange events during page reload, enabling remote code execution or denial of service via memory corruption when accessing unmapped memory. Affected versions: Firefox < 22.0, Firefox ESR 17.x < 17.0.7, Thunderbird < 17.0.7, Thunderbird ESR 17.x < 17.0.7.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.