NVD

Id
37857  
Name
CVE-2013-1693  
Description
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-06-25  
Modified Date
2017-01-06  
Seq
2013-1693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192953 37857 CVE-2013-1693 openSUSE-SU-2013:1140  View
192954 37857 CVE-2013-1693 openSUSE-SU-2013:1141  View
192955 37857 CVE-2013-1693 openSUSE-SU-2013:1142  View
192956 37857 CVE-2013-1693 openSUSE-SU-2013:1143  View
192957 37857 CVE-2013-1693 SUSE-SU-2013:1152  View
192958 37857 CVE-2013-1693 SUSE-SU-2013:1153  View
192959 37857 CVE-2013-1693 oval:org.mitre.oval:def:17075  View
192960 37857 CVE-2013-1693 RHSA-2013:0981  View
192961 37857 CVE-2013-1693 RHSA-2013:0982  View
192962 37857 CVE-2013-1693 DSA-2716  View
192963 37857 CVE-2013-1693 DSA-2720  View
192964 37857 CVE-2013-1693 http://www.mozilla.org/security/announce/2013/mfsa2013-55.html  View
192965 37857 CVE-2013-1693 60787  View
192966 37857 CVE-2013-1693 USN-1890-1  View
192967 37857 CVE-2013-1693 USN-1891-1  View
192968 37857 CVE-2013-1693 https://bugzilla.mozilla.org/show_bug.cgi?id=711043  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21554 JVNDB-2013-003129 Mozilla Firefox および Thunderbird の SVG フィルタの実装におけるピクセル値を読まれる脆弱性 Mozilla Firefox および Thunderbird の SVG フィルタの実装には、ピクセル値を読まれる、および同一生成元ポリシーを回避され異なるドメインからテキストを読まれる脆弱性が存在します。 CVE-2013-1693 61635 CVE-2013-1693 37857 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003129.html 2013-06-25 2013-08-14 View