CVE Vulnerabilities

CVE-2013-1673

Published: May 16, 2013 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a trusted path.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 20.0.1 (including)
Firefox Mozilla 19.0 (including) 19.0 (including)
Firefox Mozilla 19.0.1 (including) 19.0.1 (including)
Firefox Mozilla 19.0.2 (including) 19.0.2 (including)
Firefox Mozilla 20.0 (including) 20.0 (including)
Firefox Ubuntu lucid *
Firefox Ubuntu upstream *

References