CVE-2013-1675 — Mozilla Firefox Information Disclosure Vulnerability

provenance: imported · CVE: CVE-2013-1675

CVE-2013-1675: Mozilla Firefox Information Disclosure Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Mozilla
Product	Firefox
Date added	2022-03-03
Due date	2022-03-24
Ransomware campaign use	Unknown

Description

Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-1675

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1675
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog