← CVE Radar
CVE-2013-1675Mozilla Firefox Information Disclosure Vulnerability
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
6.5 MEDIUMEPSS 6.69%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.5 | MEDIUM | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| 4.3 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:N/A:N |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2013-1675
- Status
- Analyzed
- Assigner (CNA)
- mozilla
- Published
- May 16, 2013
- Last modified
- 2026-06-16 23:51 UTC
Affected Products
From NVD CPE configurations.
mozillafirefox2 version ranges
- before 21.0
- 17.0 before 17.0.6
mozillathunderbird1 version range
- before 17.0.6
mozillathunderbird esr1 version range
- 17.0 before 17.0.6
canonicalubuntu linux3 version ranges
- 12.04
- 12.10
- 13.04
debiandebian linux1 version range
- 7.0
redhatgluster storage server for on-premise1 version range
- 2.1
redhatenterprise linux desktop2 version ranges
- 5.0
- 6.0
redhatenterprise linux eus2 version ranges
- 5.9
- 6.4
redhatenterprise linux for ibm z systems2 version ranges
- 5.0 s390x
- 6.0 s390x
redhatenterprise linux for ibm z systems eus2 version ranges
- 5.9 s390x
- 6.4 s390x
redhatenterprise linux for power big endian2 version ranges
- 5.0 ppc
- 6.0 ppc64
redhatenterprise linux for power big endian eus2 version ranges
- 5.9 ppc
- 6.4 ppc64
redhatenterprise linux for scientific computing1 version range
- 6.0
redhatenterprise linux server2 version ranges
- 5.0
- 6.0
redhatenterprise linux server aus2 version ranges
- 5.9
- 6.4
redhatenterprise linux server eus from rhui2 version ranges
- 5.9
- 6.4
redhatenterprise linux workstation2 version ranges
- 5.0
- 6.0
opensuseopensuse2 version ranges
- 12.2
- 12.3
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-0820.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-0821.html
- debian.org http://www.debian.org/security/2013/dsa-2699
- mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2013:165
- mozilla.org http://www.mozilla.org/security/announce/2013/mfsa2013-47.html
- securityfocus.com http://www.securityfocus.com/bid/59858
- ubuntu.com http://www.ubuntu.com/usn/USN-1822-1
- ubuntu.com http://www.ubuntu.com/usn/USN-1823-1
- bugzilla.mozilla.org https://bugzilla.mozilla.org/show_bug.cgi?id=866825
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675