Search for vulnerabilities
Vulnerability details: VCID-622u-n59w-23gu
Vulnerability ID VCID-622u-n59w-23gu
Aliases CVE-2013-5602
Summary Security researcher Nils used the Address Sanitizer tool while fuzzing to discover a memory corruption issue with the JavaScript engine when using workers with direct proxies. This results in a potentially exploitable crash. In general this flaw cannot be exploited through email in the Thunderbird and Seamonkey products because scripting is disabled, but is potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
epss 0.03229 https://api.first.org/data/v1/epss?cve=CVE-2013-5602
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2013-101
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5602.json
https://api.first.org/data/v1/epss?cve=CVE-2013-5602
1023844 https://bugzilla.redhat.com/show_bug.cgi?id=1023844
CVE-2013-5602 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5602
mfsa2013-101 https://www.mozilla.org/en-US/security/advisories/mfsa2013-101
RHSA-2013:1476 https://access.redhat.com/errata/RHSA-2013:1476
RHSA-2013:1480 https://access.redhat.com/errata/RHSA-2013:1480
USN-2009-1 https://usn.ubuntu.com/2009-1/
USN-2010-1 https://usn.ubuntu.com/2010-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86592
EPSS Score 0.03229
Published At Sept. 21, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:20.737526+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-101.md 37.0.0