← Vulnerability Intelligence

CVE-2013-1675

Medium 6.5 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Mozilla Firefox Information Disclosure Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Metrics

CVSS 3.1
6.5 (MEDIUM) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS — exploit probability
7% (percentile: 94) as of 1 November 2026
CWE
CWE-665

Affected products

mozilla: firefox; mozilla: thunderbird; mozilla: thunderbird esr; canonical: ubuntu linux; debian: debian linux; redhat: gluster storage server for on-premise; redhat: enterprise linux desktop; redhat: enterprise linux eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power big endian; redhat: enterprise linux for power big endian eus; redhat: enterprise linux for scientific computing; redhat: enterprise linux server; redhat: enterprise linux server aus

References