Oval Definition:oval:org.mitre.oval:def:18210
Revision Date:2014-10-06Version:21
Title:Firefox full and stub installer DLL hijacking
Description:Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory. NOTE: this issue exists because of an incomplete fix for CVE-2012-4206.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-1715
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Mozilla Firefox
Definition Synopsis
  • Mozilla Firefox Mainline release is installed
  • AND Mozilla Firefox Mainline version is less than 23.0
  • AND Mozilla Firefox Mainline version is greater than or equal to 19.0
    • BACK