peter bassill · operator
$ cve CVE-2013-0758 JSON

CVE-2013-0758 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 73.4% (pctl 99)

Patch early

A public exploit exists.

Description

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS73.36% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-94
On CISA KEVno
Public exploityes
Published2013-01-13
Last modified2026-06-16

Affected (14)

VendorProduct
canonicalubuntu linux
mozillafirefox
mozillaseamonkey
mozillathunderbird
mozillathunderbird esr
opensuseopensuse
redhatenterprise linux desktop
redhatenterprise linux eus
redhatenterprise linux server
redhatenterprise linux server aus
redhatenterprise linux workstation
suselinux enterprise desktop
suselinux enterprise server
suselinux enterprise software development kit

Public exploits

SourceTitleDate
exploit-dbGIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)2014-12-18
exploit-dbMozilla Firefox < 17.0.1 - Flash Privileged Code Injection (Metasploit)2013-01-08

References

→ the Explorer  ·  watch your stack  ·  NVD