COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2013-1690

CVE-2013-1690

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-03-28
Reference
https://nvd.nist.gov/vuln/detail/CVE-2013-1690
⌖ exploited in the wild shame 50/100 exploited-in-wild

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

Players implicated

mozilla · vendorFirefox and Thunderbird · product

Description

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.