{"vulnerability": "cve-2013-0757", "sightings": [{"uuid": "ba984572-bbcc-486d-8aec-b547977ef891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41683", "content": "", "creation_timestamp": "2013-01-08T00:00:00.000000Z"}, {"uuid": "7f0697d6-3153-4662-a060-4c19bd1e09f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41684", "content": "", "creation_timestamp": "2014-12-18T00:00:00.000000Z"}, {"uuid": "0c2498de-ccd9-4376-861a-9dd326c1a8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "7c27a5eb-fcc8-4898-a8d4-d61dc9cfd766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "98c51d82-2d40-481e-b8aa-61914a3df8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "28f13540-1720-4d85-90d5-5da658619980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n          the user has installed Flash. No memory corruption is used.\\n\\n          First, a Flash object is cloned into the anonymous content of the SVG\\n          \\\"use\\\" element in the  (CVE-2013-0758). From there, the Flash object\\n          can navigate a child frame to a URL in the chrome:// scheme.\\n\\n          Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n          around the child frame's window reference and inject code into the chrome://\\n          context. Once we have injection into the chrome execution context, we can write\\n          the payload to disk, chmod it (if posix), and then execute.\\n\\n          Note: Flash is used here to trigger the exploit but any Firefox plugin\\n          with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.063849Z"}]}