The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2013-05-16T10:00:00
Updated: 2024-08-06T15:13:31.694Z
Reserved: 2013-02-13T00:00:00
Link: CVE-2013-1673
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-05-16T11:45:30.840
Modified: 2017-09-19T01:36:09.747
Link: CVE-2013-1673
Redhat
No data.