ZeroDay Findings
Sign inSign up

Findings

CVE-2013-1675

Mozilla Firefox Information Disclosure Vulnerability

Published May 16, 2013 · updated Jun 16, 2026 · mozilla firefox

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Timeline

Detection, updates, and resolution for this record.

  1. May 16, 2013 · Catalog

    Detected

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux12.10
  • cpe canonical/ubuntu linux13.04
  • cpe debian/debian linux7.0
  • cpe mozilla/firefoxversion unspecified
  • cpe mozilla/thunderbirdversion unspecified
  • cpe mozilla/thunderbird esrversion unspecified
  • cpe opensuse/opensuse12.2
  • cpe redhat/gluster storage server for on-premise2.1
  • vendor Mozilla Firefoxversion unspecified

Sources

  • CISA KEVCVE-2013-1675

    Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

    cisa.gov
  • CVE.orgCVE-2013-1675

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2013-1675

    30-day exploitation probability 6.7%

    first.org
  • NIST NVDCVE-2013-1675

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote atta

    nvd.nist.gov

References