Lucene search

K
cvelistMozillaCVELIST:CVE-2015-4505
HistorySep 24, 2015 - 1:00 a.m.

CVE-2015-4505

2015-09-2401:00:00
mozilla
www.cve.org

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%