CISA KEV 정보
| 취약점명 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability |
|---|---|
| 설명 | Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. |
| 조치사항 | Apply updates per vendor instructions. |
| 랜섬웨어 캠페인 악용 | Unknown |
| CWE | CWE-119 |
| 등록일 (KEV) | 2022-03-28 |
| 조치 기한 | 2022-04-18 |
| 추가 참고 | https://nvd.nist.gov/vuln/detail/CVE-2013-1690 |
NVD 상세 정보
CVSS v3.1: 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVSS v2.0: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C설명: Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.
CWE: CWE-119 | CWE-119
참조
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html [Mailing List, Third Party Advisory]
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html [Mailing List, Third Party Advisory]
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html [Mailing List, Third Party Advisory]
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html [Mailing List, Third Party Advisory]
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html [Mailing List, Third Party Advisory]
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html [Mailing List, Third Party Advisory]
- http://rhn.redhat.com/errata/RHSA-2013-0981.html [Third Party Advisory]
- http://rhn.redhat.com/errata/RHSA-2013-0982.html [Third Party Advisory]
- http://www.debian.org/security/2013/dsa-2716 [Mailing List, Third Party Advisory]
- http://www.debian.org/security/2013/dsa-2720 [Mailing List, Third Party Advisory]
- http://www.mozilla.org/security/announce/2013/mfsa2013-53.html [Vendor Advisory]
- http://www.securityfocus.com/bid/60778 [Broken Link, Third Party Advisory, VDB Entry]
- http://www.ubuntu.com/usn/USN-1890-1 [Third Party Advisory]
- http://www.ubuntu.com/usn/USN-1891-1 [Third Party Advisory]
- https://bugzilla.mozilla.org/show_bug.cgi?id=857883 [Issue Tracking]
- ... 외 20건
This product uses the NVD API but is not endorsed or certified by the NVD.