CVE-2013-1673 | BDVDB-2026-55846 Detail

Description#

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mozilla.org/security/announce/2013/mfsa2013-45.html
https://bugzilla.mozilla.org/show_bug.cgi?id=854088
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17125

Exploit#

No public exploit known

History#

Version 12013-05-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.