CVE-2013-1729 — Sensitive Information Exposure in Mozilla Firefox

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
2.6LOWNVD
EPSS
0.4%
top 37.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedSep 18
Latest updateMay 17

Description

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.

CVSS vector

AV:N/AC:H/C:P/I:N/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox23.0.1+8

🔴Vulnerability Details

1
GHSA
GHSA-ccgr-pq2w-w67v: The WebGL implementation in Mozilla Firefox before 24↗2022-05-17
▶

📋Vendor Advisories

1
Red Hat
Mozilla: WebGL Information disclosure through OS X NVIDIA graphic drivers (MFSA 2013-86)↗2013-09-17
▶

💬Community

1
Bugzilla
CVE-2013-1729 Mozilla: WebGL Information disclosure through OS X NVIDIA graphic drivers (MFSA 2013-86)↗2013-09-18
▶