CVE-2013-0788
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0,...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
10.0
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2013-0788- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
CVE-2013-0788- Updated
- 2026-11-02
EUVDEUVD-2013-0799 No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
EUVD-2013-0799- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v46v-2x9f-cqrx No score
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0,...
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
- Record
GHSA-v46v-2x9f-cqrx- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10071-1 No score
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10071-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10218-1 No score
seamonkey-2.40-6.1 on GA media
These are all security issues fixed in the seamonkey-2.40-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10218-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10230-1 No score
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10230-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
iceweaselDebian:7 From an advisory covering 22 CVEs |
before 17.0.6esr-1~deb7u1, plus listed versions 10.0.12esr-110.0.12esr-1+alpha10.0.12esr-1+nmu110.0.12esr-1+nmu1+alpha11.0-1 Show 31 moreShow less11.0-211.0-311.0-411.0~b1-111.0~b1-211.0~b2-111.0~b3-111.0~b4-111.0~b5-111.0~b6-112.0-112.0-212.0-312.0-412.0-512.0-612.0-713.0-113.0.1-113.0.1-214.0.1-114.0.1-215.0-115.0.1-116.0-116.0.1-116.0.2-117.0-117.0.1-117.0.1-217.0.5esr-1 |
17.0.6esr-1~deb7u1 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
xulrunnerRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
xulrunner-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
xulrunner-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xulrunner-develRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::computenode From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunnerRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
xulrunner-develRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbirdRed Hat:rhel_productivity:5 From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
thunderbird-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 5 CVEs |
before 0:17.0.5-1.el5_9 | 0:17.0.5-1.el5_9 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 5 CVEs |
before 0:17.0.5-1.el6_4 | 0:17.0.5-1.el6_4 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 899 CVEs |
before 50.1.0-1.1 | 50.1.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 560 CVEs |
before 45.5.1-1.1 | 45.5.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0788 is a high vulnerability (CVSS 10.0) in Mozilla Firefox, published April 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.61%, the 91st percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=635852
bugzilla.mozilla.org/show_bug.cgi?id=834240
lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
ubuntu.com/usn/USN-1791-1
debian.org/security/2013/dsa-2699
bugzilla.mozilla.org/show_bug.cgi?id=840353
Show 194 moreShow less
bugzilla.mozilla.org/show_bug.cgi?id=784730
lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html
bugzilla.mozilla.org/show_bug.cgi?id=813442
bugzilla.mozilla.org/show_bug.cgi?id=839621
mozilla.org/security/announce/2013/mfsa2013-30.html
bugzilla.mozilla.org/show_bug.cgi?id=827870
rhn.redhat.com/errata/RHSA-2013-0696.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16629
lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html
bugzilla.mozilla.org/show_bug.cgi?id=771942
bugzilla.mozilla.org/show_bug.cgi?id=852923
rhn.redhat.com/errata/RHSA-2013-0697.html
bugzilla.mozilla.org/show_bug.cgi?id=840263
lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
nvd.nist.gov/vuln/detail/CVE-2013-0788
github.com/advisories/GHSA-v46v-2x9f-cqrx
access.redhat.com/errata/RHSA-2013:0696
access.redhat.com/security/updates/classification
mozilla.org/security/known-vulnerabilities/firefoxESR.html
bugzilla.redhat.com/show_bug.cgi?id=946927
bugzilla.redhat.com/show_bug.cgi?id=946929
bugzilla.redhat.com/show_bug.cgi?id=946931
bugzilla.redhat.com/show_bug.cgi?id=946932
bugzilla.redhat.com/show_bug.cgi?id=946935
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0696.json
access.redhat.com/security/cve/CVE-2013-0788
cve.org/CVERecord?id=CVE-2013-0788
access.redhat.com/security/cve/CVE-2013-0793
cve.org/CVERecord?id=CVE-2013-0793
nvd.nist.gov/vuln/detail/CVE-2013-0793
mozilla.org/security/announce/2013/mfsa2013-38.html
access.redhat.com/security/cve/CVE-2013-0795
cve.org/CVERecord?id=CVE-2013-0795
nvd.nist.gov/vuln/detail/CVE-2013-0795
mozilla.org/security/announce/2013/mfsa2013-36.html
access.redhat.com/security/cve/CVE-2013-0796
cve.org/CVERecord?id=CVE-2013-0796
nvd.nist.gov/vuln/detail/CVE-2013-0796
mozilla.org/security/announce/2013/mfsa2013-35.html
access.redhat.com/security/cve/CVE-2013-0800
cve.org/CVERecord?id=CVE-2013-0800
nvd.nist.gov/vuln/detail/CVE-2013-0800
mozilla.org/security/announce/2013/mfsa2013-31.html
access.redhat.com/errata/RHSA-2013:0697
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0697.json
suse.com/security/cve/CVE-2008-5913
suse.com/security/cve/CVE-2009-0040
suse.com/security/cve/CVE-2009-0652
suse.com/security/cve/CVE-2009-0771
suse.com/security/cve/CVE-2009-0772
suse.com/security/cve/CVE-2009-0773
suse.com/security/cve/CVE-2009-0774
suse.com/security/cve/CVE-2009-0775
suse.com/security/cve/CVE-2009-0776
suse.com/security/cve/CVE-2009-0777
suse.com/security/cve/CVE-2009-1044
suse.com/security/cve/CVE-2009-1169
suse.com/security/cve/CVE-2009-1302
suse.com/security/cve/CVE-2009-1303
suse.com/security/cve/CVE-2009-1304
suse.com/security/cve/CVE-2009-1305
suse.com/security/cve/CVE-2009-1306
suse.com/security/cve/CVE-2009-1307
suse.com/security/cve/CVE-2009-1308
suse.com/security/cve/CVE-2009-1309
suse.com/security/cve/CVE-2009-1310
suse.com/security/cve/CVE-2009-1311
suse.com/security/cve/CVE-2009-1312
suse.com/security/cve/CVE-2009-1313
suse.com/security/cve/CVE-2009-1563
suse.com/security/cve/CVE-2009-2470
suse.com/security/cve/CVE-2009-2654
suse.com/security/cve/CVE-2009-3069
suse.com/security/cve/CVE-2009-3070
suse.com/security/cve/CVE-2009-3071
suse.com/security/cve/CVE-2009-3072
suse.com/security/cve/CVE-2009-3073
suse.com/security/cve/CVE-2009-3074
suse.com/security/cve/CVE-2009-3075
suse.com/security/cve/CVE-2009-3077
suse.com/security/cve/CVE-2009-3078
suse.com/security/cve/CVE-2009-3079
suse.com/security/cve/CVE-2009-3274
suse.com/security/cve/CVE-2009-3370
suse.com/security/cve/CVE-2009-3371
suse.com/security/cve/CVE-2009-3372
suse.com/security/cve/CVE-2009-3373
suse.com/security/cve/CVE-2009-3374
suse.com/security/cve/CVE-2009-3375
suse.com/security/cve/CVE-2009-3376
suse.com/security/cve/CVE-2009-3377
suse.com/security/cve/CVE-2009-3378
suse.com/security/cve/CVE-2009-3379
suse.com/security/cve/CVE-2009-3380
suse.com/security/cve/CVE-2009-3381
suse.com/security/cve/CVE-2009-3383
suse.com/security/cve/CVE-2009-3388
suse.com/security/cve/CVE-2009-3389
suse.com/security/cve/CVE-2009-3555
suse.com/security/cve/CVE-2009-3979
suse.com/security/cve/CVE-2009-3980
suse.com/security/cve/CVE-2009-3982
suse.com/security/cve/CVE-2009-3983
suse.com/security/cve/CVE-2009-3984
suse.com/security/cve/CVE-2009-3985
suse.com/security/cve/CVE-2010-0164
suse.com/security/cve/CVE-2010-0165
suse.com/security/cve/CVE-2010-0166
suse.com/security/cve/CVE-2010-0167
suse.com/security/cve/CVE-2010-0168
suse.com/security/cve/CVE-2010-0169
suse.com/security/cve/CVE-2010-0170
suse.com/security/cve/CVE-2010-0171
suse.com/security/cve/CVE-2010-0172
suse.com/security/cve/CVE-2010-0173
suse.com/security/cve/CVE-2010-0174
suse.com/security/cve/CVE-2010-0176
suse.com/security/cve/CVE-2010-0177
suse.com/security/cve/CVE-2010-0178
suse.com/security/cve/CVE-2010-0181
suse.com/security/cve/CVE-2010-0182
suse.com/security/cve/CVE-2010-0654
suse.com/security/cve/CVE-2010-1028
suse.com/security/cve/CVE-2010-1121
suse.com/security/cve/CVE-2010-1125
suse.com/security/cve/CVE-2010-1196
suse.com/security/cve/CVE-2010-1197
suse.com/security/cve/CVE-2010-1198
suse.com/security/cve/CVE-2010-1199
suse.com/security/cve/CVE-2010-1200
suse.com/security/cve/CVE-2010-1201
suse.com/security/cve/CVE-2010-1202
suse.com/security/cve/CVE-2010-1203
suse.com/security/cve/CVE-2010-1205
suse.com/security/cve/CVE-2010-1206
suse.com/security/cve/CVE-2010-1207
suse.com/security/cve/CVE-2010-1208
suse.com/security/cve/CVE-2010-1209
suse.com/security/cve/CVE-2010-1210
suse.com/security/cve/CVE-2010-1211
suse.com/security/cve/CVE-2010-1212
suse.com/security/cve/CVE-2010-1213
suse.com/security/cve/CVE-2010-1214
suse.com/security/cve/CVE-2010-1215
suse.com/security/cve/CVE-2010-2751
suse.com/security/cve/CVE-2010-2752
suse.com/security/cve/CVE-2010-2753
suse.com/security/cve/CVE-2010-2754
suse.com/security/cve/CVE-2010-2755
suse.com/security/cve/CVE-2010-2760
suse.com/security/cve/CVE-2010-2762
suse.com/security/cve/CVE-2010-2764
suse.com/security/cve/CVE-2010-2765
suse.com/security/cve/CVE-2010-2766
suse.com/security/cve/CVE-2010-2767
suse.com/security/cve/CVE-2010-2768
suse.com/security/cve/CVE-2010-2769
suse.com/security/cve/CVE-2010-3166
suse.com/security/cve/CVE-2010-3167
suse.com/security/cve/CVE-2010-3168
suse.com/security/cve/CVE-2010-3169
suse.com/security/cve/CVE-2010-3170
suse.com/security/cve/CVE-2010-3173
suse.com/security/cve/CVE-2010-3174
suse.com/security/cve/CVE-2010-3175
suse.com/security/cve/CVE-2010-3176
suse.com/security/cve/CVE-2010-3177
suse.com/security/cve/CVE-2010-3178
suse.com/security/cve/CVE-2010-3179
suse.com/security/cve/CVE-2010-3180
suse.com/security/cve/CVE-2010-3182
suse.com/security/cve/CVE-2010-3183
suse.com/security/cve/CVE-2010-3765
suse.com/security/cve/CVE-2011-0068
suse.com/security/cve/CVE-2011-0069
suse.com/security/cve/CVE-2011-0070
suse.com/security/cve/CVE-2011-0079
suse.com/security/cve/CVE-2011-0080
suse.com/security/cve/CVE-2011-0081
suse.com/security/cve/CVE-2011-0084
suse.com/security/cve/CVE-2011-1187
suse.com/security/cve/CVE-2011-1202
suse.com/security/cve/CVE-2011-2366
suse.com/security/cve/CVE-2011-2367
suse.com/security/cve/CVE-2011-2368
suse.com/security/cve/CVE-2011-2369
suse.com/security/cve/CVE-2011-2370
suse.com/security/cve/CVE-2011-2371
suse.com/security/cve/CVE-2011-2372
suse.com/security/cve/CVE-2011-2373
suse.com/security/cve/CVE-2011-2374
suse.com/security/cve/CVE-2011-2375
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
Left out here: 1,951 references. The JSON record has them.