← back
CVE-2013-1690

CVE-2013-1690

CVSS 8.8 HIGHEPSS 69.2%● KEVCWE-119
In short

Firefox and Thunderbird do not properly handle page reloading events, allowing a malicious website to crash the application or potentially run unauthorized code by triggering access to invalid memory locations.

Technical detail

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer. The vulnerability exists in the handling of onreadystatechange events during page reload, enabling remote code execution or denial of service via memory corruption when accessing unmapped memory. Affected versions: Firefox < 22.0, Firefox ESR 17.x < 17.0.7, Thunderbird < 17.0.7, Thunderbird ESR 17.x < 17.0.7.

Summary generated and translated by AI from the official description.
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 2
githubgithub.com/vlad902/annotated-fbi-tbb-exploit★ 14exploitdbwww.exploit-db.com/exploits/27429unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0981.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0982.htmlhttps://bugzilla.mozilla.org/show_bug.cgi?id=857883https://bugzilla.mozilla.org/show_bug.cgi?id=901365https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690