CVE-2013-1707: Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0...

Security readout for executives and security teams

CVE-2013-1707 is a local privilege escalation flaw in Mozilla’s updater path. A person who already has local access to an affected system could abuse a long pathname passed to the Mozilla Maintenance Service to gain higher privileges. The main business risk is from unmanaged or legacy endpoints still running obsolete Firefox or Thunderbird versions. Exposure is most likely on legacy endpoints or images with affected Firefox or Thunderbird versions still installed. The source bundle does not identify affected operating systems beyond the Mozilla Maintenance Service context, and no CPEs are provided. Treat this as a legacy hygiene and endpoint hardening issue. It is not described as remotely exploitable or actively exploited in the provided sources, but affected installations can turn local access into higher privileges. Mitigation focus: Upgrade affected Firefox installations to 23.0 or later, preferably a current supported release.; Upgrade Firefox ESR and Thunderbird 17.x installations to 17.0.8 or later.; Remove obsolete Mozilla products from unmanaged endpoints and golden images..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.