CVEvulnerability
CVE-2013-1673
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
Affected configurations
• mozilla firefox (<= 20.0.1)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
Related
Weakness · not in database (1)
References
- http://www.mozilla.org/security/announce/2013/mfsa2013-45.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=854088 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17125 oval.cisecurity.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-45.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=854088 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17125 oval.cisecurity.org