CVE-2013-0787

🗓️ 11 Mar 2013 10:00:00Reported by mozillaType

Use-after-free vulnerability in nsEditor::IsPreformatted function in Mozilla Firefox before 19.0.2, Firefox ESR 17.x before 17.0.4, Thunderbird before 17.0.4, Thunderbird ESR 17.x before 17.0.4, and SeaMonkey before 2.16.1 allows remote attackers to execute arbitrary code via vectors involving an execCommand call

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
FreeBSD	mozilla -- use-after-free in HTML Editor	7 Mar 201300:00	–	freebsd
Tenable Nessus	SeaMonkey 2.16.x < 2.16.1 nsHTMLEditor User-After-Free	26 Mar 201300:00	–	nessus
Tenable Nessus	Mozilla SeaMonkey 2.16.x < 2.16.1 nsHTMLEditor User-After-Free	26 Mar 201300:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : xulrunner (CESA-2013:0614)	10 Mar 201300:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : thunderbird (CESA-2013:0627)	13 Mar 201300:00	–	nessus
Tenable Nessus	Debian DSA-2699-1 : iceweasel - several vulnerabilities	3 Jun 201300:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- use-after-free in HTML Editor (630c8c08-880f-11e2-807f-d43d7e0c7c02)	11 Mar 201300:00	–	nessus
Tenable Nessus	GLSA-201309-23 : Mozilla Products: Multiple vulnerabilities	28 Sep 201300:00	–	nessus

NVD

Node

mozilla firefoxRange≤19.0.1

mozilla firefoxMatch19.0

Node

mozilla firefoxMatch17.0

mozilla firefoxMatch17.0.1

mozilla firefoxMatch17.0.2

mozilla firefoxMatch17.0.3

Node

mozilla thunderbirdRange≤17.0.3

mozilla thunderbirdMatch17.0

mozilla thunderbirdMatch17.0.1

mozilla thunderbirdMatch17.0.2

Node

mozilla thunderbird_esrMatch17.0

mozilla thunderbird_esrMatch17.0.1

mozilla thunderbird_esrMatch17.0.2

mozilla thunderbird_esrMatch17.0.3

Node

mozilla seamonkeyRange≤2.16

mozilla seamonkeyMatch2.16beta1

mozilla seamonkeyMatch2.16beta2

mozilla seamonkeyMatch2.16beta3

mozilla seamonkeyMatch2.16beta4

mozilla seamonkeyMatch2.16beta5

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html
ubuntu	www.ubuntu.com/usn/USN-1758-1
lists	www.lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html
rhn	www.rhn.redhat.com/errata/RHSA-2013-0614.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737
debian	www.debian.org/security/2013/dsa-2699
rhn	www.rhn.redhat.com/errata/RHSA-2013-0627.html
h30499	www.h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
mozilla	www.mozilla.org/security/announce/2013/mfsa2013-29.html
lists	www.lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html

29 Apr 2026 01:13Current

9.4High risk

Vulners AI Score9.4

CVSS 29.3

EPSS0.08281

CWE-399