CVE-2013-1729

2013-09-1810:08:24

CWE-200

[email protected]

web.nvd.nist.gov

webgl

mozilla firefox

nvidia

mac os x

security vulnerability

cve-2013-1729

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.1%

JSON

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.

Affected configurations

NVD

Node

mozillafirefoxRange≤23.0.1

mozillafirefoxMatch19.0

mozillafirefoxMatch19.0.1

mozillafirefoxMatch19.0.2

mozillafirefoxMatch20.0

mozillafirefoxMatch20.0.1

mozillafirefoxMatch21.0

mozillafirefoxMatch22.0

mozillafirefoxMatch23.0

AND

applemac_os_x

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle23.0.1
mozilla:firefoxmozilla firefoxeq19.0
mozilla:firefoxmozilla firefoxeq19.0.1
mozilla:firefoxmozilla firefoxeq19.0.2
mozilla:firefoxmozilla firefoxeq20.0
mozilla:firefoxmozilla firefoxeq20.0.1
mozilla:firefoxmozilla firefoxeq21.0
mozilla:firefoxmozilla firefoxeq22.0
mozilla:firefoxmozilla firefoxeq23.0

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	le	23.0.1
mozilla:firefox	mozilla firefox	eq	19.0
mozilla:firefox	mozilla firefox	eq	19.0.1
mozilla:firefox	mozilla firefox	eq	19.0.2
mozilla:firefox	mozilla firefox	eq	20.0
mozilla:firefox	mozilla firefox	eq	20.0.1
mozilla:firefox	mozilla firefox	eq	21.0
mozilla:firefox	mozilla firefox	eq	22.0
mozilla:firefox	mozilla firefox	eq	23.0