Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ye96-58tj-dqhk
Vulnerability ID VCID-ye96-58tj-dqhk
Aliases CVE-2013-1688
Summary Security researcher Mariusz Mlynski reported that when a user examines the profiler output on a malicious website containing specially crafted code, it is possible for arbitrary code execution to occur. This occurs because the profiler user interface runs in a special iframe that parses data from the profiler to render the UI, leaving it susceptible to manipulation.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-94 Improper Control of Generation of Code ('Code Injection')
System Score Found at
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
epss 0.01199 https://api.first.org/data/v1/epss?cve=CVE-2013-1688
cvssv2 9.3 https://nvd.nist.gov/vuln/detail/CVE-2013-1688
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2013-52
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1688.json
https://api.first.org/data/v1/epss?cve=CVE-2013-1688
https://bugzilla.mozilla.org/show_bug.cgi?id=873966
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16427
http://www.mozilla.org/security/announce/2013/mfsa2013-52.html
http://www.ubuntu.com/usn/USN-1890-1
977601 https://bugzilla.redhat.com/show_bug.cgi?id=977601
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:19.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:20.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:20.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:20.0.1:*:*:*:*:*:*:*
CVE-2013-1688 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1688
CVE-2013-1688 https://nvd.nist.gov/vuln/detail/CVE-2013-1688
mfsa2013-52 https://www.mozilla.org/en-US/security/advisories/mfsa2013-52
USN-1890-1 https://usn.ubuntu.com/1890-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2013-1688
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.78854
EPSS Score 0.01199
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:17:41.986195+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-52.md 38.0.0