Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1673
HistoryMay 16, 2013 - 12:00 a.m.

CVE-2013-1673

2013-05-1600:00:00
ubuntu.com
ubuntu.com
13

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not
properly maintain Mozilla Maintenance Service registry entries in certain
situations involving upgrades from older Firefox versions, which allows
local users to gain privileges by leveraging write access to a “trusted
path.”

Notes

Author Note
chrisccoulson Affects the Mozilla Maintenance Service on Windows only

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%