Search for vulnerabilities
Vulnerability details: VCID-7394-t4ca-rqgj
Vulnerability ID VCID-7394-t4ca-rqgj
Aliases CVE-2013-1674
Summary Security researcher Nils reported a use-after-free when resizing video while playing. This could allow for arbitrary code execution. In general these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled, but are potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
epss 0.04031 https://api.first.org/data/v1/epss?cve=CVE-2013-1674
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2013-46
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1674.json
https://api.first.org/data/v1/epss?cve=CVE-2013-1674
962598 https://bugzilla.redhat.com/show_bug.cgi?id=962598
CVE-2013-1674 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1674
mfsa2013-46 https://www.mozilla.org/en-US/security/advisories/mfsa2013-46
RHSA-2013:0820 https://access.redhat.com/errata/RHSA-2013:0820
RHSA-2013:0821 https://access.redhat.com/errata/RHSA-2013:0821
USN-1822-1 https://usn.ubuntu.com/1822-1/
USN-1823-1 https://usn.ubuntu.com/1823-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.88041
EPSS Score 0.04031
Published At Aug. 15, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:16.495646+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-46.md 37.0.0