جزئیات آسیب‌پذیری

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.

• http://www.ubuntu.com/usn/USN-1890-1 vendor-advisoryx_refsource_UBUNTU
• http://rhn.redhat.com/errata/RHSA-2013-0982.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html vendor-advisoryx_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html vendor-advisoryx_refsource_SUSE
• https://bugzilla.mozilla.org/show_bug.cgi?id=857883 x_refsource_CONFIRM
• http://www.mozilla.org/security/announce/2013/mfsa2013-53.html x_refsource_CONFIRM
• http://rhn.redhat.com/errata/RHSA-2013-0981.html vendor-advisoryx_refsource_REDHAT
• http://www.ubuntu.com/usn/USN-1891-1 vendor-advisoryx_refsource_UBUNTU
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html vendor-advisoryx_refsource_SUSE
• http://www.debian.org/security/2013/dsa-2716 vendor-advisoryx_refsource_DEBIAN
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16996 vdb-entrysignaturex_refsource_OVAL
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html vendor-advisoryx_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html vendor-advisoryx_refsource_SUSE
• http://www.debian.org/security/2013/dsa-2720 vendor-advisoryx_refsource_DEBIAN
• https://bugzilla.mozilla.org/show_bug.cgi?id=901365 x_refsource_CONFIRM
• http://www.securityfocus.com/bid/60778 vdb-entryx_refsource_BID
• http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html vendor-advisoryx_refsource_SUSE
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1690 government-resource