Reference page — cumulative record through Monday, October 5, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2013-1675
n/a n/a — Mozilla Firefox
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N R U H N N 6.5 .0670 93.7 YES
AFFECTED
Product Versions Fixed
n/a n/a – —
TIMELINE
Feb 13 Reserved by mozilla
May 16 Published (CNA: mozilla)
Mar 3 Added to CISA KEV, remediation due 2022-03-24
Description
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| February 13, 2013 | Reserved | Reserved by mozilla |
| May 16, 2013 | Published | Published (CNA: mozilla) |
| March 3, 2022 | KEV ADDED | Added to CISA KEV, remediation due 2022-03-24 |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| n/a | n/a | — | n/a | — |
References (16)
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html [vendor-advisory, x_refsource_SUSE]
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html [vendor-advisory, x_refsource_SUSE]
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html [vendor-advisory, x_refsource_SUSE]
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html [vendor-advisory, x_refsource_SUSE]
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html [vendor-advisory, x_refsource_SUSE]
- http://rhn.redhat.com/errata/RHSA-2013-0820.html [vendor-advisory, x_refsource_REDHAT]
- http://rhn.redhat.com/errata/RHSA-2013-0821.html [vendor-advisory, x_refsource_REDHAT]
- http://www.debian.org/security/2013/dsa-2699 [vendor-advisory, x_refsource_DEBIAN]
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:165 [vendor-advisory, x_refsource_MANDRIVA]
- http://www.mozilla.org/security/announce/2013/mfsa2013-47.html [x_refsource_CONFIRM]
- http://www.securityfocus.com/bid/59858 [vdb-entry, x_refsource_BID]
- http://www.ubuntu.com/usn/USN-1822-1 [vendor-advisory, x_refsource_UBUNTU]
- http://www.ubuntu.com/usn/USN-1823-1 [vendor-advisory, x_refsource_UBUNTU]
- https://bugzilla.mozilla.org/show_bug.cgi?id=866825 [x_refsource_CONFIRM]
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976 [vdb-entry, signature, x_refsource_OVAL]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675 [government-resource]
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2013-1675 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 5, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
