CVE-2013-1700 in Mozilla Firefox
Summary
The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/13/2013
Disclosure
06/25/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9281 | Mozilla Firefox Mozilla Maintenance Service access control | 264 | Not defined | Official fix | CVE-2013-1700 |