AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-1720

MEDIUM · CVSS 6.8 EPSS 3.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-09-18 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It affects Firefox. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2013-1720
Severity
MEDIUM
CVSS
6.8
EPSS
3.99%
Firefox

Original NVD Description

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 does not properly maintain the state of the insertion-mode stack for template elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer over-read) by triggering use of this stack in its empty state.