vulnti.work

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

High Listed in CISA KEV
CVECVE-2013-1690
First seen2022-03-28 00:00 UTC
Disclosed2022-03-28 00:00 UTC
Last updated2026-07-15 13:31 UTC
Channel statuspending_review

Summary

Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Mozilla:Firefox and Thunderbird

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV