Unknown
CVE-2013-1675
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2013-1675
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- debian linux 7.0,
- enterprise linux desktop 5.0,
- enterprise linux desktop 6.0,
- enterprise linux eus 5.9,
- enterprise linux eus 6.4,
- enterprise linux for ibm z systems 5.0 s390x,
- enterprise linux for ibm z systems 6.0 s390x,
- enterprise linux for ibm z systems eus 5.9 s390x,
- enterprise linux for ibm z systems eus 6.4 s390x,
- enterprise linux for power big endian 5.0 ppc,
- enterprise linux for power big endian 6.0 ppc64,
- enterprise linux for power big endian eus 5.9 ppc,
- enterprise linux for power big endian eus 6.4 ppc64,
- enterprise linux for scientific computing 6.0,
- enterprise linux server 5.0,
- enterprise linux server 6.0,
- enterprise linux server aus 5.9,
- enterprise linux server aus 6.4,
- enterprise linux server eus from rhui 5.9,
- enterprise linux server eus from rhui 6.4,
- enterprise linux workstation 5.0,
- enterprise linux workstation 6.0,
- firefox,
- gluster storage server for on-premise 2.1,
- opensuse 12.2,
- opensuse 12.3,
- thunderbird,
- thunderbird esr,
- ubuntu linux 12.04,
- ubuntu linux 12.10,
- ubuntu linux 13.04
Exploited in the Wild
Would you like to delete this Exploited in the Wild Report?
Yes, delete this reportReferences
Advisory
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: