جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

• http://www.debian.org/security/2013/dsa-2699 vendor-advisoryx_refsource_DEBIAN
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:165 vendor-advisoryx_refsource_MANDRIVA
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html vendor-advisoryx_refsource_SUSE
• https://bugzilla.mozilla.org/show_bug.cgi?id=866825 x_refsource_CONFIRM
• http://www.ubuntu.com/usn/USN-1823-1 vendor-advisoryx_refsource_UBUNTU
• http://rhn.redhat.com/errata/RHSA-2013-0821.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html vendor-advisoryx_refsource_SUSE
• http://www.mozilla.org/security/announce/2013/mfsa2013-47.html x_refsource_CONFIRM
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976 vdb-entrysignaturex_refsource_OVAL
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html vendor-advisoryx_refsource_SUSE
• http://rhn.redhat.com/errata/RHSA-2013-0820.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html vendor-advisoryx_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html vendor-advisoryx_refsource_SUSE
• http://www.securityfocus.com/bid/59858 vdb-entryx_refsource_BID
• http://www.ubuntu.com/usn/USN-1822-1 vendor-advisoryx_refsource_UBUNTU
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675 government-resource