CVE-2013-1675

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

CISA Known Exploited Vulnerability

Vendor / Product Mozilla — Firefox

Date Added 2022-03-03

Remediation Due 2022-03-24

https://nvd.nist.gov/vuln/detail/CVE-2013-1675

Weakness Classification (1)

CWE-665

Affected Software (32)

Vendor	Product	Version
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.04
debian	debian_linux	7.0
mozilla	firefox	< 21.0
mozilla	firefox	17.0 – 17.0.6
mozilla	thunderbird	< 17.0.6
mozilla	thunderbird_esr	17.0 – 17.0.6
opensuse	opensuse	12.2
opensuse	opensuse	12.3
redhat	enterprise_linux_desktop	5.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_eus	5.9
redhat	enterprise_linux_eus	6.4
redhat	enterprise_linux_for_ibm_z_systems	5.0_s390x
redhat	enterprise_linux_for_ibm_z_systems	6.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	5.9_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	6.4_s390x
redhat	enterprise_linux_for_power_big_endian	5.0_ppc
redhat	enterprise_linux_for_power_big_endian	6.0_ppc64
redhat	enterprise_linux_for_power_big_endian_eus	5.9_ppc
redhat	enterprise_linux_for_power_big_endian_eus	6.4_ppc64
redhat	enterprise_linux_for_scientific_computing	6.0
redhat	enterprise_linux_server	5.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	5.9
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_server_eus_from_rhui	5.9
redhat	enterprise_linux_server_eus_from_rhui	6.4
redhat	enterprise_linux_workstation	5.0