CVE-2013-1675

Published: May 16, 2013Modified: Apr 22, 2026CISA KEV

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Affected (32)

Products: Mozilla: Firefox, Thunderbird, Thunderbird Esr · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

3 products

Thunderbird Esr

1 product

1 product

12 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus From Rhui

Enterprise Linux Workstation

Gluster Storage Server For On Premise

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 21.0
Mozilla Firefox	From 17.0 to 17.0.6
Mozilla Thunderbird	Before 17.0.6
Mozilla Thunderbird Esr	From 17.0 to 17.0.6

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration D

22 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 5.9
Redhat Enterprise Linux Eus	Version 6.4
Redhat Enterprise Linux For Ibm Z Systems	Version 5.0_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 6.0_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 5.9_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 6.4_s390x
Redhat Enterprise Linux For Power Big Endian	Version 5.0_ppc
Redhat Enterprise Linux For Power Big Endian	Version 6.0_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 5.9_ppc
Redhat Enterprise Linux For Power Big Endian Eus	Version 6.4_ppc64
Redhat Enterprise Linux For Scientific Computing	Version 6.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server Aus	Version 5.9
Redhat Enterprise Linux Server Aus	Version 6.4
Redhat Enterprise Linux Server Eus From Rhui	Version 5.9
Redhat Enterprise Linux Server Eus From Rhui	Version 6.4
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Gluster Storage Server For On Premise	Version 2.1

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3

Related CWEs

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (31)

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0820.html

Source: security@mozilla.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0821.html

Source: security@mozilla.org

Third Party Advisory

http://www.debian.org/security/2013/dsa-2699

Source: security@mozilla.org

Mailing List

http://www.mandriva.com/security/advisories?name=MDVSA-2013:165

Source: security@mozilla.org

Broken Link

http://www.mozilla.org/security/announce/2013/mfsa2013-47.html

Source: security@mozilla.org

Vendor Advisory

http://www.securityfocus.com/bid/59858

Source: security@mozilla.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1822-1

Source: security@mozilla.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-1823-1

Source: security@mozilla.org

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=866825

Source: security@mozilla.org

ExploitIssue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976

Source: security@mozilla.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0820.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-0821.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2013/dsa-2699

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.mandriva.com/security/advisories?name=MDVSA-2013:165

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.mozilla.org/security/announce/2013/mfsa2013-47.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/59858

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1822-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-1823-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=866825

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.