Search for vulnerabilities
Vulnerability details: VCID-9r5y-hsy6-6bd4
Vulnerability ID VCID-9r5y-hsy6-6bd4
Aliases CVE-2013-0787
Summary VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand() function while internal editor operations are occurring. This could allow for arbitrary code execution.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
epss 0.03359 https://api.first.org/data/v1/epss?cve=CVE-2013-0787
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2013-29
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0787.json
https://api.first.org/data/v1/epss?cve=CVE-2013-0787
918876 https://bugzilla.redhat.com/show_bug.cgi?id=918876
CVE-2013-0787 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0787
mfsa2013-29 https://www.mozilla.org/en-US/security/advisories/mfsa2013-29
RHSA-2013:0614 https://access.redhat.com/errata/RHSA-2013:0614
RHSA-2013:0627 https://access.redhat.com/errata/RHSA-2013:0627
USN-1758-1 https://usn.ubuntu.com/1758-1/
USN-1758-2 https://usn.ubuntu.com/1758-2/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86868
EPSS Score 0.03359
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:21.895299+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-29.md 37.0.0