CVE-2013-1675
בינונית 6.5 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Mozilla Firefox Information Disclosure Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
מדדים
- CVSS 3.1
-
6.5 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS — סבירות ניצול
- 7% (אחוזון 100) נכון ל-24/7/2026
- CWE
- CWE-665
מוצרים מושפעים
mozilla: firefox; mozilla: thunderbird; mozilla: thunderbird esr; canonical: ubuntu linux; debian: debian linux; redhat: gluster storage server for on-premise; redhat: enterprise linux desktop; redhat: enterprise linux eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power big endian; redhat: enterprise linux for power big endian eus; redhat: enterprise linux for scientific computing; redhat: enterprise linux server; redhat: enterprise linux server aus
קישורים
- http://www.mozilla.org/security/announce/2013/mfsa2013-47.html Vendor Advisory
- http://www.mozilla.org/security/announce/2013/mfsa2013-47.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=866825 ExploitIssue Tracking
- https://bugzilla.mozilla.org/show_bug.cgi?id=866825 ExploitIssue Tracking
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html Mailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0820.html Third Party Advisory