Search for vulnerabilities
| Vulnerability ID | VCID-yyny-rkr9-eugq |
| Aliases |
CVE-2013-0773
|
| Summary | Mozilla developer Bobby Holley discovered that it was possible to bypass some protections in Chrome Object Wrappers (COW) and System Only Wrappers (SOW), making their prototypes mutable by web content. This could be used leak information from chrome objects and possibly allow for arbitrary code execution. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 8.0 |
| Risk | 4.0 |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| Reference id | Reference type | URL |
|---|---|---|
| https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0773.json | ||
| https://api.first.org/data/v1/epss?cve=CVE-2013-0773 | ||
| 911839 | https://bugzilla.redhat.com/show_bug.cgi?id=911839 | |
| CVE-2013-0773 | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0773 | |
| mfsa2013-24 | https://www.mozilla.org/en-US/security/advisories/mfsa2013-24 | |
| USN-1729-1 | https://usn.ubuntu.com/1729-1/ | |
| USN-1748-1 | https://usn.ubuntu.com/1748-1/ |
| Percentile | 0.77014 |
| EPSS Score | 0.01092 |
| Published At | July 30, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2025-07-31T08:10:23.190088+00:00 | Mozilla Importer | Import | https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-24.md | 37.0.0 |