CVE-2013-1675
published 2013-05-16CVE-2013-1675: Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data…
PriorityP272medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
KEVITW
CISA Known Exploited Vulnerabilitydue 2022-03-24
Exploited in the wild
EPSS
6.70%
93.2th percentile
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| mozilla | firefox | < 21.0 | 21.0 |
| mozilla | firefox | >= 17.0 < 17.0.6 | 17.0.6 |
| mozilla | thunderbird | < 17.0.6 | 17.0.6 |
| mozilla | thunderbird_esr | >= 17.0 < 17.0.6 | 17.0.6 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_for_ibm_z_systems | — | — |
| redhat | enterprise_linux_for_ibm_z_systems | — | — |
| redhat | enterprise_linux_for_ibm_z_systems_eus | — | — |
| redhat | enterprise_linux_for_ibm_z_systems_eus | — | — |
| redhat | enterprise_linux_for_power_big_endian | — | — |
| redhat | enterprise_linux_for_power_big_endian | — | — |
| redhat | enterprise_linux_for_power_big_endian_eus | — | — |
| redhat | enterprise_linux_for_power_big_endian_eus | — | — |
| redhat | enterprise_linux_for_scientific_computing | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability is triggered via a crafted web site targeting uninitialized DOMSVGZoomEvent functions (nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale); monitor for SVGZoom event abuse in browser traffic ↗
- →Thunderbird is not exploitable via email because scripting is disabled; focus detection efforts on browser and browser-like contexts ↗
- →Reference Mozilla Security Advisory MFSA 2013-47 for patch and indicator context; unpatched Firefox < 21.0 and ESR < 17.0.6 are vulnerable ↗
- ·Exploitation leads to uninitialized memory disclosure and a potentially exploitable crash; not a remote code execution primitive by itself but can leak sensitive process memory ↗
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vulncheck6.5MEDIUM
cisa6.5MEDIUM
vendor_ubuntu10.0CRITICAL
vendor_redhat6.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Mozilla Firefox Information Disclosure Vulnerability
cisa·2022-03-03·CVSS 6.5
CVE-2013-1675 [MEDIUM] CWE-119 Mozilla Firefox Information Disclosure Vulnerability
Vulnerability: Mozilla Firefox Information Disclosure Vulnerability
Affected: Mozilla Firefox
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2013-1675
Remediation Due Date: 2022-03-24
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2013-05-14·CVSS 10.0
CVE-2013-0801 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Multiple memory safety issues were discovered in Firefox. If the user were
tricked into opening a specially crafted page, an attacker could possibly
exploit these to cause a denial of service via application crash, or
potentially execute code with the privileges of the user invoking Firefox.
(CVE-2013-0801, CVE-2013-1669)
Cody Crews discovered that some constructors could be used to bypass
restrictions enforced by their Chrome Object Wrapper (COW). An attacker
could exploit this to conduct cross-site scripting (XSS) attacks.
(CVE-2013-1670)
It was discovered that the file input element could expose the full local
path under certain conditions. An attack
Red Hat
Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
vendor_redhat·2013-05-14·CVSS 6.5
CVE-2013-1675 [MEDIUM] CWE-456 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Package: thunderbird (Red Hat Enterprise Linux 5) - Affected
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2013-05-14·CVSS 10.0
CVE-2013-0801 [CRITICAL] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Multiple memory safety issues were discovered in Thunderbird. If the user
were tricked into opening a specially crafted message with scripting
enabled, an attacker could possibly exploit these to cause a denial of
service via application crash, or potentially execute code with the
privileges of the user invoking Thunderbird. (CVE-2013-0801,
CVE-2013-1669)
Cody Crews discovered that some constructors could be used to bypass
restrictions enforced by their Chrome Object Wrapper (COW). If a user had
scripting enabled, an attacker could exploit this to conduct cross-site
scripting (XSS) attacks. (CVE-2013-1670)
A use-after-free was discovered when resizing video content whilst it is
playing. If a
GHSA
GHSA-7cv2-f4f9-vw96: Mozilla Firefox before 21
ghsa_unreviewed·2022-05-17
CVE-2013-1675 [MEDIUM] CWE-119 GHSA-7cv2-f4f9-vw96: Mozilla Firefox before 21
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
VulnCheck
Mozilla Firefox Information Disclosure Vulnerability
vulncheck·2013·CVSS 6.5
CVE-2013-1675 [MEDIUM] CWE-119 Mozilla Firefox Information Disclosure Vulnerability
Mozilla Firefox Information Disclosure Vulnerability
Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Affected: Mozilla Firefox
Required Action: Apply updates per vendor instructions.
Exploitation References: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
Remediation Due: 2022-03-24
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-4518 RHUI: PKI entitlement certificates are world readable
bugzilla·2013-11-05·CVSS 5.5
CVE-2013-4518 [MEDIUM] CVE-2013-4518 RHUI: PKI entitlement certificates are world readable
CVE-2013-4518 RHUI: PKI entitlement certificates are world readable
Ina Panova of Red Hat reports:
Entitlement certificates keys have open permission in all client configuration rpms.
Custom client conf package:
[root@cli1 ~]# ls -la /etc/pki/entitlement/*key*
-rw-r--r--. 1 root root 1679 Nov 5 08:35 /etc/pki/entitlement/key.pem
[root@cli1 ~]#
Rh-amazon-rhui-client package:
[root@rhua ~]# ls -la /etc/pki/entitlement/*key*
-rw-r--r--. 1 root root 1675 Jan 22 2013 /etc/pki/entitlement/content-rhel6.key
-rw-r--r--. 1 root root 1679 Jan 22 2013 /etc/pki/entitlement/rhui-client-config-server-6.key
[root@rhua ~]#
Discussion:
OpenShift Online does not appear to be affected:
[appname-username.rhcloud.com 012345678901234567890123]\> cat /etc/pki/entitlement/content-rhel6.key
cat: /etc/pki
Bugzilla
CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
bugzilla·2013-05-14·CVSS 6.5
CVE-2013-1675 [MEDIUM] CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
CVE-2013-1675 Mozilla: Uninitialized functions in DOMSVGZoomEvent (MFSA 2013-47)
Mozilla community member Ms2ger discovered that some DOMSVGZoomEvent functions are used without being properly initialized, causing unitialized memory to be used when they are called. This can lead to a potentially exploitable crash.
In general these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled, but are potentially a risk in browser or browser-like contexts.
External Reference:
http://www.mozilla.org/security/announce/2013/mfsa2013-47.html
Acknowledgements:
Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Ms2ger as the original reporter.
Discussion:
This issue has been addressed in following products:
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0820.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0821.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mandriva.com/security/advisories?name=MDVSA-2013:165http://www.mozilla.org/security/announce/2013/mfsa2013-47.htmlhttp://www.securityfocus.com/bid/59858http://www.ubuntu.com/usn/USN-1822-1http://www.ubuntu.com/usn/USN-1823-1https://bugzilla.mozilla.org/show_bug.cgi?id=866825https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0820.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0821.htmlhttp://www.debian.org/security/2013/dsa-2699http://www.mandriva.com/security/advisories?name=MDVSA-2013:165http://www.mozilla.org/security/announce/2013/mfsa2013-47.htmlhttp://www.securityfocus.com/bid/59858http://www.ubuntu.com/usn/USN-1822-1http://www.ubuntu.com/usn/USN-1823-1https://bugzilla.mozilla.org/show_bug.cgi?id=866825https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675
2013-05-16
Published
2022-03-03
Added to CISA KEV
Exploited in the wild