NetSight
IP …
medium6.5Known exploited

CVE-2013-1675

Mozilla Firefox Information Disclosure Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

Apply updates per vendor instructions.

Impact

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Affected products

VendorProductAffected versions
MozillaFirefox
before 21.0
from 17.0 before 17.0.6
MozillaThunderbird
before 17.0.6
MozillaThunderbird Esr
from 17.0 before 17.0.6
CanonicalUbuntu Linux
Versions 12.04, 12.10, 13.04
DebianDebian Linux
Version 7.0
RedhatGluster Storage Server For On-Premise
Version 2.1
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Versions 5.9, 6.4
RedhatEnterprise Linux For Ibm Z Systems
Versions 5.0_s390x, 6.0_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 5.9_s390x, 6.4_s390x
RedhatEnterprise Linux For Power Big Endian
Versions 5.0_ppc, 6.0_ppc64
RedhatEnterprise Linux For Power Big Endian Eus
Versions 5.9_ppc, 6.4_ppc64

Weakness classification

CWE-665

References