CVE-2013-1677

CVE-2013-1677 describes an out-of-bounds read vulnerability in the gfxSkipCharsIterator::SetOffsets function within Mozilla Firefox, Firefox ESR, Thunderbird, and Thunderbird ESR. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service. With a CVSS score of 10.0, it is considered critical due to its network-based attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.