CVEvulnerability
CVE-2013-1700
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-06-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.
Affected configurations
• mozilla firefox (<= 21.0)
• mozilla firefox 19.0
• mozilla firefox 19.0.1
• mozilla firefox 19.0.2
• mozilla firefox 20.0
• mozilla firefox 20.0.1
Related
Weakness · not in database (1)
References
- http://www.mozilla.org/security/announce/2013/mfsa2013-62.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=867056 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17126 oval.cisecurity.org
- http://www.mozilla.org/security/announce/2013/mfsa2013-62.html Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=867056 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17126 oval.cisecurity.org