CVE-2013-1690VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Affects Mozilla Firefox and ThunderbirdSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 69.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-1690 (opens in a new tab)

Description

CVE-2013-1690 is a vulnerability in Mozilla Firefox and Thunderbird where improper handling of onreadystatechange events combined with page reloading can lead to denial-of-service (DoS) or potentially allow execution of malicious code. This flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data.

Summary

Mozilla Firefox and Thunderbird do not correctly handle onreadystatechange events when a page is reloaded. This improper handling can be triggered by a crafted website to cause a denial-of-service condition or possibly execute malicious code on the affected system. The vulnerability is identified as CVE-2013-1690 and is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). It has been exploited in the wild, indicating active threat usage. However, no explicit patch or remediation details are provided in the available data.

Impact

Remote attackers can exploit this vulnerability by hosting a specially crafted website that triggers improper event handling in Firefox or Thunderbird, resulting in denial-of-service or potential code execution. This can disrupt user operations and compromise system integrity. The presence of known exploitation in the wild elevates the risk to affected users.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor Mozilla's official security advisories for updates and apply any available patches promptly once released.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:11:28 UTC

Weaknesses

References

Related threats