Search for vulnerabilities
Vulnerability details: VCID-8a4y-kcp4-xyda
Vulnerability ID VCID-8a4y-kcp4-xyda
Aliases CVE-2013-0782
Summary Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free, out of bounds read, and buffer overflow problems rated as low to critical security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting four additional use-after-free and out of bounds write flaws introduced during Firefox development that were fixed before general release. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
epss 0.02889 https://api.first.org/data/v1/epss?cve=CVE-2013-0782
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2013-28
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0782.json
https://api.first.org/data/v1/epss?cve=CVE-2013-0782
911865 https://bugzilla.redhat.com/show_bug.cgi?id=911865
CVE-2013-0782 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0782
mfsa2013-28 https://www.mozilla.org/en-US/security/advisories/mfsa2013-28
RHSA-2013:0271 https://access.redhat.com/errata/RHSA-2013:0271
RHSA-2013:0272 https://access.redhat.com/errata/RHSA-2013:0272
USN-1729-1 https://usn.ubuntu.com/1729-1/
USN-1748-1 https://usn.ubuntu.com/1748-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85798
EPSS Score 0.02889
Published At Aug. 9, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:21.777751+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-28.md 37.0.0