What’s Vulnerable › Vulnerabilities

CVE-2013-0799

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-04-03 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.

Affected products

• Mozilla Firefox: through 19.0.2; 19.0, 19.0.1, 17.0, 17.0.1, 17.0.2, 17.0.3 (+1)
• Mozilla Thunderbird: 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4
• Mozilla Thunderbird ESR: 17.0, 17.0.1, 17.0.2, 17.0.3, 17.0.4

References

• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-32.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=848417
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155
• http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-32.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=848417
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155

Get alerted when CVE-2013-0799 or the next vulnerability affects your stack