VULNERABILITY INTELLIGENCE
CVE-2013-1694
CVSS score7.5 HIGH
EPSS probability4.60%
CISA KEVNot currently listed
Published2013-06-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 does not properly handle the lack of a wrapper, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.
Weakness classification
- CWE-20: Improper Input Validation