CVE-2013-1689

MEDIUM

Firefox < 19.0.2 - Denial of Service via Event Handling with Frames

Title source: llm
STIX 2.1

Description

Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event handling with frames.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2013-1689
Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=817219

Scores

CVSS v3 6.5
EPSS 0.0083
EPSS Percentile 53.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (2)
mozilla/firefox 20.0 alpha1
mozilla/firefox < 19.0.2
Published Dec 10, 2019
Tracked Since Feb 18, 2026