Home > Vulnerability Database > CVE-2013-1693

Mend.io Vulnerability Database

CVE-2013-1693

Date: June 25, 2013

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.

Severity Score

3.7

Related Resources (20)

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-1693

Url: http://rhn.redhat.com/errata/RHSA-2013-0982.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html

Url: http://www.debian.org/security/2013/dsa-2720

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=711043

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00010.html

Url: https://access.redhat.com/security/cve/CVE-2013-1693

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17075

Url: http://www.mozilla.org/security/announce/2013/mfsa2013-55.html

Url: http://www.ubuntu.com/usn/USN-1890-1

Url: http://www.ubuntu.com/usn/USN-1891-1

Url: http://www.securityfocus.com/bid/60787

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00004.html

Url: http://rhn.redhat.com/errata/RHSA-2013-0981.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00003.html

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00006.html

Url: http://www.debian.org/security/2013/dsa-2716

Url: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00011.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2013-1693

Url: https://www.mend.io/vulnerability-database/CVE-2013-1693

Severity Score

3.7

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2013-1693

Date: June 25, 2013

Severity Score

Related Resources (20)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?