Lucene search

K
mozillaMozilla FoundationMFSA2013-44
HistoryMay 14, 2013 - 12:00 a.m.

Local privilege escalation through Mozilla Maintenance Service — Mozilla

2013-05-1400:00:00
Mozilla Foundation
www.mozilla.org
19

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Security researcher Seb Patane reported an issue with the Mozilla Maintenance Service on Windows. This issue allows unprivileged users to local privilege escalation through the system privileges used by the service when interacting with local malicious software. This allows the user to bypass integrity checks leading to local privilege escalation. Local file system access is necessary in order for this issue to be exploitable and it cannot be triggered through web content.

Affected configurations

Vulners
Node
mozillafirefoxRange<21
OR
mozillafirefox_esrRange<17.0.6
OR
mozillathunderbirdRange<17.0.6
OR
mozillathunderbird_esrRange<17.0.6

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%