CVE-2013-1693

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7…

published June 26, 2013

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03745 · 89.8th percentile
Published
2013-06-26T01:00Z
EPSS history
Timeline
  • 26 JUN 01:00Z
    The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7…
    cvelistv5