中危
Mozilla Firefox和Thunderbird信息泄露漏洞
2013-05-16 10:00:00 公开 ，2026-02-18 15:35:28 更新
- 关键漏洞
- CISA KEV
- 远程
- CWE Top 25 (2023)
- 开源组件漏洞
- 无需认证
- CWE Top 25 (2024)
- 公开PoC
风险信息
- CVSS v2 向量
- AV:N/AC:M/Au:N/C:P/I:N/A:N
- CVSS v2 风险值
- 4.3
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS v3.1 风险值
- 6.5
详细信息
- 漏洞类型
- 缓冲区错误
- 漏洞描述
- Mozilla Firefox和Thunderbird都是由美国Mozilla基金会开发。Firefox是一款开源Web浏览器。Thunderbird是从Mozilla Application Suite中独立出来的一套电子邮件客户端软件。Mozilla Firefox和Thunderbird可能允许远程攻击者获取敏感信息，这是由某些DOMSVGZoomEvent（）函数中的未初始化内存错误引起的。攻击者可以利用此漏洞获取敏感信息。
- 修复建议
- 有关补丁、升级或建议的解决方法信息，请参阅MFSA 2013-47： http://www.mozilla.org/security/announce/2013/mfsa2013-47.html
参考链接
- https://bugzilla.mozilla.org/show_bug.cgi?id=866825
NVD · x_refsource_CONFIRM
- http://www.mozilla.org/security/announce/2013/mfsa2013-47.html
NVD · x_refsource_CONFIRM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16976
NVD · vdb-entry · signature · x_refsource_OVAL
- http://rhn.redhat.com/errata/RHSA-2013-0820.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:165
NVD · vendor-advisory · x_refsource_MANDRIVA
- http://www.ubuntu.com/usn/USN-1823-1
NVD · vendor-advisory · x_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html
NVD · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html
NVD · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html
NVD · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2013-0821.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html
NVD · vendor-advisory · x_refsource_SUSE
- http://www.debian.org/security/2013/dsa-2699
NVD · vendor-advisory · x_refsource_DEBIAN
- http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html
NVD · vendor-advisory · x_refsource_SUSE
- http://www.ubuntu.com/usn/USN-1822-1
NVD · vendor-advisory · x_refsource_UBUNTU
- https://osv.dev/vulnerability/DSA-2720-1
OSV
- https://osv.dev/vulnerability/DSA-2699-1
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1675
NVD · US Government Resource