VULNERABILITY INTELLIGENCE

CVE-2013-1674

CVSS score9.3 HIGH
EPSS probability5.83%
CISA KEVNot currently listed
Published2013-05-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video.

Primary references