Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Known Exploited Vulnerability

CVE-2013-1690, Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service or possibly execute arbitrary code via a crafted web site.

The following remediation steps are recommended / required by April 18, 2022: Apply updates per vendor instructions.