Exploited Vulnerabilities Daily
🌐 English

Home › Mozilla

CVE-2013-1690: Mozilla Firefox and Thunderbird

EPSS69.0%No. 733 of 1739 in KEV
CVE year2013~9 yrs before listing
Same vendor in KEV13
Same product6
FieldValue
VendorMozilla
ProductFirefox and Thunderbird
NameMozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Added to KEV2022-03-28
US federal due date2022-04-18
Ransomware useUnknown
CWECWE-119

CISA description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2019-11708Mozilla Firefox and Thunderbird2022-05-2355.8%Unknown
CVE-2019-11707Mozilla Firefox and Thunderbird2022-05-2337.6%Unknown
CVE-2020-6820Mozilla Firefox and Thunderbird2021-11-037.0%Unknown
CVE-2020-6819Mozilla Firefox and Thunderbird2021-11-033.0%Unknown
CVE-2019-17026Mozilla Firefox and Thunderbird2021-11-0346.3%Unknown

NVD — CVE-2013-1690

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Mozilla Firefox and Thunderbird vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-28.