{"vulnerability": "CVE-2013-0758", "sightings": [{"uuid": "19a8749b-6bd8-43f2-93b1-cb2524495914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41684", "content": "", "creation_timestamp": "2014-12-18T00:00:00.000000Z"}, {"uuid": "25d3cb47-673c-472b-8153-ef96b5544062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41683", "content": "", "creation_timestamp": "2013-01-08T00:00:00.000000Z"}, {"uuid": "be2db27f-4263-4607-819e-79f625f9db55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "70b0b451-04f4-4c64-a233-367974561a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "02c3a595-c9bb-4965-a796-3336b144bbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:13.000000Z"}, {"uuid": "995629cc-34a1-488d-b330-b9fe78cfce77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:50.000000Z"}, {"uuid": "dbfcb80b-5440-4acb-b33c-ad4593519cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c8474859-627e-4fc2-bdf0-cf5af667d756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n          the user has installed Flash. No memory corruption is used.\\n\\n          First, a Flash object is cloned into the anonymous content of the SVG\\n          \\\"use\\\" element in the  (CVE-2013-0758). From there, the Flash object\\n          can navigate a child frame to a URL in the chrome:// scheme.\\n\\n          Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n          around the child frame's window reference and inject code into the chrome://\\n          context. Once we have injection into the chrome execution context, we can write\\n          the payload to disk, chmod it (if posix), and then execute.\\n\\n          Note: Flash is used here to trigger the exploit but any Firefox plugin\\n          with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.137342Z"}]}