CVE-2016-5295 | BDVDB-2026-102140 Detail

MozillaFirefox

Description#

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/94337
https://www.mozilla.org/en-US/security/advisories/mfsa2013-44/
http://www.securitytracker.com/id/1037298
https://www.mozilla.org/security/advisories/mfsa2016-89/
https://bugzilla.mozilla.org/show_bug.cgi?id=1247239

Exploit#

No public exploit known

History#

Version 12018-06-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.