CVE-2013-1675

Fixed in a distro release ExploitedEPSS 7%CVSS 6.5

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Published 2013-05-16 · In CISA KEV since 2022-03-03 · CVE record · OSV

Products: mozilla firefox, mozilla thunderbird, mozilla thunderbird_esr, canonical ubuntu_linux, debian_linux, redhat gluster_storage_server_for_on-premise, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_ibm_z_systems_eus, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_power_big_endian_eus, redhat enterprise_linux_for_scientific_computing, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus_from_rhui, redhat enterprise_linux_workstation, opensuse

Distro releases