FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2013-1693

This CVE name corresponds to:

Entered Topic
2013-06-26 mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2013-1693
Phase Assigned(20130213)

Description

The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by observing timing differences in execution of filter code.

References

Source Reference
CONFIRM http://www.mozilla.org/security/announce/2013/mfsa2013-55.html
CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=711043
DEBIAN DSA-2716
DEBIAN DSA-2720
REDHAT RHSA-2013:0981
REDHAT RHSA-2013:0982
SUSE SUSE-SU-2013:1152
SUSE SUSE-SU-2013:1153
SUSE openSUSE-SU-2013:1140
SUSE openSUSE-SU-2013:1141
SUSE openSUSE-SU-2013:1142
SUSE openSUSE-SU-2013:1143
UBUNTU USN-1890-1
UBUNTU USN-1891-1
OVAL oval:org.mitre.oval:def:17075