Oval Definition:oval:org.mitre.oval:def:17125
Revision Date:2014-10-06Version:18
Title:The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
Description:The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-1673
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Mozilla Firefox
Definition Synopsis
  • Mozilla Firefox Mainline release is installed
  • AND Mozilla Firefox Mainline version is greater than or equal to 19.0
  • AND Mozilla Firefox Mainline version is less than 21.0
  • BACK