{"schemaVersion":3,"id":"CVE-2013-1690","aliases":[],"status":"published","duplicateOf":null,"title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","description":"Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","dates":{"published":"2013-06-26T01:00:00.000Z","modified":"2025-10-22T00:05:41.588Z","reserved":null,"kevAdded":["2022-03-28T00:00:00.000Z"],"kevDue":["2022-04-18T00:00:00.000Z"]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.69021,"percentile":0.99347,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.69021},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.69021,"percentile":0.99347}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.69021,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.69021,"percentile":0.99347}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","description":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","label":"nvd.nist.gov/vuln/detail/CVE-2013-1690"}],"vendor":"Mozilla","product":"Firefox and Thunderbird","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","description":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","label":"nvd.nist.gov/vuln/detail/CVE-2013-1690"}],"vendor":"Mozilla","product":"Firefox and Thunderbird","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"27429","name":"Mozilla Firefox - onreadystatechange Event DocumentViewerImpl Use-After-Free (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/27429","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/27429.rb","codes":["CVE-2013-1690","OSVDB-94584"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_BROWSER_MOZILLA_FIREFOX_ONREADYSTATECHANGE","name":"Firefox onreadystatechange Event DocumentViewerImpl Use After Free","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/browser/mozilla_firefox_onreadystatechange.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/browser/mozilla_firefox_onreadystatechange","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"12.10","noFixRecorded":false,"fixedIn":null},{"text":"13.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 12.10 | 13.04","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":{"isEol":true,"eolDate":"2018-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (Wheezy)","eolFrom":"2018-05-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"7.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mozilla","product":"firefox","name":"firefox","label":"firefox","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 22.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 17.0, < 17.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.0 | ≥ 17.0, < 17.0.7","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"firefox","label":"Firefox","category":"app"}},"hubHref":"/vendor/mozilla/firefox"},{"vendor":"mozilla","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 17.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.0.7","eol":null,"hubHref":"/vendor/mozilla/thunderbird"},{"vendor":"mozilla","product":"thunderbird_esr","name":"thunderbird esr","label":"thunderbird_esr","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 17.0, < 17.0.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 17.0, < 17.0.7","eol":null,"hubHref":"/vendor/mozilla/thunderbird_esr"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.4","noFixRecorded":false,"fixedIn":null},{"text":"12.2","noFixRecorded":false,"fixedIn":null},{"text":"12.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.4 | 12.2 | 12.3","eol":{"isEol":true,"eolDate":"2012-11-05T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11.4","label":"11.4","eolFrom":"2012-11-05T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus","name":"enterprise linux eus","label":"enterprise_linux_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.9","noFixRecorded":false,"fixedIn":null},{"text":"6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.9 | 6.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus","name":"enterprise linux server aus","label":"enterprise_linux_server_aus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.9","noFixRecorded":false,"fixedIn":null},{"text":"6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.9 | 6.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"gluster_storage_server_for_on-premise","name":"gluster storage server for on-premise","label":"gluster_storage_server_for_on-premise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.0","eol":null,"hubHref":"/vendor/redhat/gluster_storage_server_for_on-premise"},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp4","noFixRecorded":false,"fixedIn":null},{"text":"11:sp2","noFixRecorded":false,"fixedIn":null},{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp4 | 11:sp2 | 11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp4","noFixRecorded":false,"fixedIn":null},{"text":"11:sp1","noFixRecorded":false,"fixedIn":null},{"text":"11:sp2","noFixRecorded":false,"fixedIn":null},{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp4 | 11:sp1 | 11:sp2 | 11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit","name":"linux enterprise software development kit","label":"linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp4","noFixRecorded":false,"fixedIn":null},{"text":"11:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp4 | 11:sp3","eol":null,"hubHref":"/vendor/suse/linux_enterprise_software_development_kit"}],"affectedCount":15,"eol":{"hasEol":true,"count":3},"references":[{"url":"http://www.ubuntu.com/usn/USN-1890-1","label":"www.ubuntu.com/usn/USN-1890-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0982.html","label":"rhn.redhat.com/errata/RHSA-2013-0982.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=857883","label":"bugzilla.mozilla.org/show_bug.cgi?id=857883","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Issue Tracking"]},{"url":"http://www.mozilla.org/security/announce/2013/mfsa2013-53.html","label":"www.mozilla.org/security/announce/2013/mfsa2013-53.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0981.html","label":"rhn.redhat.com/errata/RHSA-2013-0981.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1891-1","label":"www.ubuntu.com/usn/USN-1891-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2716","label":"www.debian.org/security/2013/dsa-2716","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Mailing List","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2720","label":"www.debian.org/security/2013/dsa-2720","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=901365","label":"bugzilla.mozilla.org/show_bug.cgi?id=901365","hostname":"bugzilla.mozilla.org","tags":["X Refsource CONFIRM","Issue Tracking"]},{"url":"http://www.securityfocus.com/bid/60778","label":"www.securityfocus.com/bid/60778","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html","label":"lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":["DSA-2716-1","DSA-2720-1","MGASA-2013-0189","MGASA-2013-0329","OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1","RHSA-2013:0981","RHSA-2013:0982"],"duplicates":[],"related":["OPENSUSE-SU-2024:10071-1","OPENSUSE-SU-2024:10230-1","OPENSUSE-SU-2024:14572-1"]},"timeline":[{"kind":"published","date":"2013-06-26T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-28T00:00:00.000Z","label":"Added to CISA KEV","detail":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-18T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-22T00:05:41.588Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T05:24:46.398Z","stale":false,"partial":false}}