CVE-2013-1690—Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Vulnerability Name

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2013-1690

Related Weaknesses

• CWE-119