What’s Vulnerable › Vulnerabilities

CVE-2013-1729

• Severity: low (CVSS 2.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-09-18 · updated 2026-06-16
• Weakness: CWE-200

Description

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.

Affected products

• Mozilla Firefox: through 23.0.1; 19.0, 19.0.1, 19.0.2, 20.0, 20.0.1, 21.0 (+2)

References

• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-86.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=879656
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html
• http://www.mozilla.org/security/announce/2013/mfsa2013-86.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=879656

Get alerted when CVE-2013-1729 or the next vulnerability affects your stack