NVD

Id
37855  
Name
CVE-2013-1690  
Description
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-06-25  
Modified Date
2017-01-06  
Seq
2013-1690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192920 37855 CVE-2013-1690 openSUSE-SU-2013:1140  View
192921 37855 CVE-2013-1690 openSUSE-SU-2013:1141  View
192922 37855 CVE-2013-1690 openSUSE-SU-2013:1142  View
192923 37855 CVE-2013-1690 openSUSE-SU-2013:1143  View
192924 37855 CVE-2013-1690 SUSE-SU-2013:1152  View
192925 37855 CVE-2013-1690 SUSE-SU-2013:1153  View
192926 37855 CVE-2013-1690 oval:org.mitre.oval:def:16996  View
192927 37855 CVE-2013-1690 RHSA-2013:0981  View
192928 37855 CVE-2013-1690 RHSA-2013:0982  View
192929 37855 CVE-2013-1690 DSA-2716  View
192930 37855 CVE-2013-1690 DSA-2720  View
192931 37855 CVE-2013-1690 http://www.mozilla.org/security/announce/2013/mfsa2013-53.html  View
192932 37855 CVE-2013-1690 60778  View
192933 37855 CVE-2013-1690 USN-1890-1  View
192934 37855 CVE-2013-1690 USN-1891-1  View
192935 37855 CVE-2013-1690 https://bugzilla.mozilla.org/show_bug.cgi?id=857883  View
192936 37855 CVE-2013-1690 https://bugzilla.mozilla.org/show_bug.cgi?id=901365  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21552 JVNDB-2013-003127 Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox および Thunderbird は、ページの再読み込みに関連した onreadystatechange イベントを適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-1690 61632 CVE-2013-1690 37855 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003127.html 2013-06-25 2013-08-14 View