Mozilla Firefox Information Disclosure Vulnerability

Known Exploited Vulnerability

CVE-2013-1675, Mozilla Firefox Information Disclosure Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

The following remediation steps are recommended / required by March 24, 2022: Apply updates per vendor instructions.