Lucene search
PRIOn knowledge basePRION:CVE-2015-4505HistorySep 24, 2015 - 4:59 a.m.
Code injection
2015-09-2404:59:00
PRIOn knowledge base
www.prio-n.com
3
updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | le | 40.0.3 | |
| firefox_esr | eq | 38.0 | |
| firefox_esr | eq | 38.0.1 | |
| firefox_esr | eq | 38.0.5 | |
| firefox_esr | eq | 38.1.0 | |
| firefox_esr | eq | 38.1.1 | |
| firefox_esr | eq | 38.2.0 | |
| firefox_esr | eq | 38.2.1 |
References
lists.opensuse.org/opensuse-security-announce/2015-10/msg00000.html
lists.opensuse.org/opensuse-security-announce/2015-10/msg00003.html
lists.opensuse.org/opensuse-security-announce/2015-10/msg00005.html
www.mozilla.org/security/announce/2015/mfsa2015-100.html
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securitytracker.com/id/1033640
bugzilla.mozilla.org/show_bug.cgi?id=1177861
Related
ubuntucve
ubuntucve
CVE-2015-4505
2015-09-24 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2015-100) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2015:1679-1)
2015-10-06 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities (Sep 2015) - Windows
2015-09-29 00:00:00
cve
cve
CVE-2015-4505
2015-09-24 04:59:08
cvelist
cvelist
CVE-2015-4505
2015-09-24 01:00:00
nvd
nvd
CVE-2015-4505
2015-09-24 04:59:08
mozilla
mozilla
Arbitrary file manipulation by local user through Mozilla updater — Mozilla
2015-09-22 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2015-10-05 18:09:37
Security update for seamonkey (important)
2015-10-05 18:10:25
Security update for MozillaFirefox (important)
2015-10-01 10:09:18
nessus
nessus
openSUSE Security Update : MozillaThunderbird (openSUSE-2015-631)
2015-10-06 00:00:00
Firefox ESR < 38.3 Multiple Vulnerabilities
2015-09-22 00:00:00
openSUSE Security Update : seamonkey (openSUSE-2015-632)
2015-10-06 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-09-22 00:00:00
kaspersky
kaspersky
KLA10672 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2015-09-22 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-10-19 00:00:00