Search for vulnerabilities
Vulnerability details: VCID-r74n-x7n1-k3dt
Vulnerability ID VCID-r74n-x7n1-k3dt
Aliases CVE-2013-5599
Summary Security researcher Nils used the Address Sanitizer tool while fuzzing to discover missing strong references in browsing engine leading to use-after-frees. This can lead to a potentially exploitable crash. In general these flaws cannot be exploited through email in the Thunderbird and Seamonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
epss 0.02864 https://api.first.org/data/v1/epss?cve=CVE-2013-5599
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2013-100
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5599.json
https://api.first.org/data/v1/epss?cve=CVE-2013-5599
1023843 https://bugzilla.redhat.com/show_bug.cgi?id=1023843
CVE-2013-5599 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5599
mfsa2013-100 https://www.mozilla.org/en-US/security/advisories/mfsa2013-100
RHSA-2013:1476 https://access.redhat.com/errata/RHSA-2013:1476
RHSA-2013:1480 https://access.redhat.com/errata/RHSA-2013:1480
USN-2009-1 https://usn.ubuntu.com/2009-1/
USN-2010-1 https://usn.ubuntu.com/2010-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85734
EPSS Score 0.02864
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:22.972350+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-100.md 37.0.0