1585 matches found
CVE-2016-2826
The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution, which might allow local users to gain privileges via a Trojan horse file...
Design/Logic Flaw
The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution, which might allow local users to gain privileges via a Trojan horse file...
CVE-2016-2826
The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution, which might allow local users to gain privileges via a Trojan horse file...
CVE-2016-2826
The maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows does not prevent MAR extracted-file modification during updater execution, which might allow local users to gain privileges via a Trojan horse file...
CVE-2016-2826
The CVE-2016-2826 issue affects Mozilla Firefox on Windows prior to 47.0 and Firefox ESR before 45.2/45.x, where the maintenance/updater service does not prevent MAR-extracted file modification, enabling local privilege escalation via a Trojan horse file. Affected component: the updater’s MAR han...
File overwrite and privilege escalation through Mozilla Windows updater — Mozilla
Security researcher Frédéric Hoguin reported a mechanism where the Mozilla Windows updater could be used to overwrite arbitrary files. He found that files extracted by the updater from a MAR archive are not locked for writing and can be overwritten by other processes while the updater is running....
KLA10822 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, elevate privileges, cause denial of service, conduct XSS or obtain sensitive information. Below is a complete list of...
PT-2016-2199 · Mozilla · Firefox Esr +1
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 47.0 Mozilla Firefox ESR versions prior to 45.2 Description: The issue is related to the maintenance service in Mozilla Firefox, which does not properly prevent modification of extracted files during the...
The vulnerability of the Firefox browser, which allows a hacker to delete any files they want
The vulnerability of the Mozilla Maintenance Service updater for the Firefox browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files by manipulating local files...
Mozilla Firefox Maintenance Service Updater Arbitrary File Execution Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Mozilla Maintenance Service is one of the silent updater components. An arbitrary file execution vulnerability exists in the Mozilla Maintenance Service updater in Windows-based versions of Mozilla Firef...
CVE-2016-2809
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...
CVE-2016-2809
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution...
OTA updater - External URLs, Possible privilege escalation, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application OTA updater published at the 'play' market has multiple vulnerabilities...
Limesurvey Unauthenticated File Download
This module exploits an unauthenticated file download vulnerability in limesurvey between 2.0+ and 2.06+ Build 151014. The file is downloaded as a ZIP and unzipped automatically, thus binary files can be downloaded. Module Options msf use auxiliary/admin/http/limesurvey/filedownload msf...
Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to read arbitrary files
The vulnerability of the updater.exe component in Firefox and Firefox ESR browsers is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor to read arbitrary files during the software update process...
Mozilla Firefox and Firefox ESR updater.exe Privilege Bypass Vulnerability
Mozilla Firefox is an open source web browser. A security vulnerability exists in the Mozilla Firefox updater.exe file that allows local attackers to perform a symbolic link attack to write arbitrary files at program startup...
Drupal CMS Updater Module Cross-Site Scripting Vulnerability
Drupal is a free and open source content management system developed in PHP.CMS Updater module for Drupal is a module for Drupal that provides security protection for Drupal websites. A cross-site scripting vulnerability in the Drupal CMS Updater module 7.x-1.3 prior to version 7.x-1.x allows...
Drupal CMS Updater Module Security Restriction Bypass Vulnerability
Drupal is a free and open source content management system developed in PHP.CMS Updater module for Drupal is a module for Drupal that provides security protection for Drupal websites. A security restriction bypass vulnerability exists in the Drupal CMS Updater module 7.x-1.3 and prior to 7.x-1.x,...
Microsoft Revokes Leaked D-Link Certificates
Microsoft today revoked trust for the four digital certificates inadvertently leaked last week by networking gear manufacturer D-Link. Microsoft said it has modified its Certificate Trust List removing trust for the four certs, which could have been used to sign malicious code used in attacks. Th...
CVE-2015-4505
updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service...