VULNERABILITY INTELLIGENCE
CVE-2013-1675
CVSS score6.5 MEDIUM
EPSS probability6.70%
CISA KEVKnown exploited vulnerability
Published2013-05-16
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Known Exploited Vulnerability
Mozilla Firefox Information Disclosure Vulnerability
Vendor / product: Mozilla / Firefox
Description
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Weakness classification
- CWE-665: Improper Initialization
Primary references
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Mailing List, Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Third Party Advisory
- security@mozilla.org — Mailing List
- security@mozilla.org — Broken Link
- security@mozilla.org — Vendor Advisory
- security@mozilla.org — Broken Link, Third Party Advisory, VDB Entry
- security@mozilla.org — Third Party Advisory