CVE-2013-1694

CVE Database · CVE-2013-1694

CVE-2013-1694

· N/AModified

CVSS v3.1

N/A

EPSS

4.60%

Published

Jun 26, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.

Weaknesses (CWE)

CWE-20

Affected Products (27)

mozilla · firefoxvulnerable

· firefox

References (20)

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html

http://rhn.redhat.com/errata/RHSA-2013-0981.html

http://rhn.redhat.com/errata/RHSA-2013-0982.html

http://www.debian.org/security/2013/dsa-2716

http://www.debian.org/security/2013/dsa-2720

http://www.mozilla.org/security/announce/2013/mfsa2013-56.html

Vendor Advisory

http://www.securityfocus.com/bid/60776

KEV Catalog EPSS Scores Vendors All CVEs