Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1700
HistoryJun 26, 2013 - 3:19 a.m.

CVE-2013-1700

2013-06-2603:19:10
CWE-264
[email protected]
web.nvd.nist.gov
2

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.

Affected configurations

NVD
Node
mozillafirefoxRange≤21.0
OR
mozillafirefoxMatch19.0
OR
mozillafirefoxMatch19.0.1
OR
mozillafirefoxMatch19.0.2
OR
mozillafirefoxMatch20.0
OR
mozillafirefoxMatch20.0.1
AND
microsoftwindows

Related

cve 1
prion 1
mozilla 1
ubuntucve 1
openvas 3
cvelist 1
freebsd 1
nessus 7
securityvulns 1
cve
cve
CVE-2013-1700
2013-06-26 03:19:10
prion
prion
Design/Logic Flaw
2013-06-26 03:19:00
mozilla
mozilla
Inaccessible updater can lead to local privilege escalation — Mozilla
2013-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2013-1700
2013-06-26 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-62) - Linux
2021-11-11 00:00:00
Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)
2013-06-26 00:00:00
Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows
2013-06-26 00:00:00
cvelist
cvelist
CVE-2013-1700
2013-06-26 01:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
nessus
nessus
Mozilla Firefox < 22.0 Multiple Vulnerabilities
2013-06-26 00:00:00
Mozilla Firefox < 22.0 Multiple Vulnerabilities
2013-06-26 00:00:00
Mozilla Thunderbird < 17.0.7 Multiple Vulnerabilities
2013-06-28 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2013-1700
cve1prion1mozilla1ubuntucve1openvas3cvelist1freebsd1nessus7securityvulns1