Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-1520
HistoryApr 30, 2014 - 12:00 a.m.

CVE-2014-1520

2014-04-3000:00:00
ubuntu.com
ubuntu.com
11

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

JSON

maintenservice_installer.exe in the Maintenance Service Installer in
Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows
allows local users to gain privileges by placing a Trojan horse DLL file
into a temporary directory at an unspecified point in the update process.

Notes

Author Note
chrisccoulson Affects the Mozilla Maintenance Service on Windows only

Related

cve 1
packetstorm 1
openvas 10
cvelist 1
nvd 1
zdt 1
prion 1
mozilla 1
suse 2
nessus 9
freebsd 1
gentoo 1
cve
cve
CVE-2014-1520
2014-04-30 10:49:04
packetstorm
packetstorm
Mozilla Firefox DLL Hijacking
2016-06-15 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-35) - Linux
2021-11-11 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (May 2014) - Windows
2014-05-06 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities-01 (May 2014) - Mac OS X
2014-05-06 00:00:00
cvelist
cvelist
CVE-2014-1520
2014-04-30 10:00:00
nvd
nvd
CVE-2014-1520
2014-04-30 10:49:04
zdt
zdt
Mozilla Arbitrary Code Execution / Privilege Escalation Vulnerability
2021-03-09 00:00:00
prion
prion
Directory traversal
2014-04-30 10:49:00
mozilla
mozilla
Privilege escalation through Mozilla Maintenance Service Installer — Mozilla
2014-04-29 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2014-05-16 02:04:19
Security update for Mozilla Firefox (important)
2014-05-14 01:04:17
nessus
nessus
Firefox ESR 24.x < 24.5 Multiple Vulnerabilities
2014-04-29 00:00:00
SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 9185)
2014-05-14 00:00:00
Fedora 20 : firefox-29.0-5.fc20 / thunderbird-24.5.0-1.fc20 / xulrunner-29.0-1.fc20 (2014-5833)
2014-05-02 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2014-04-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2014-1520
cve1packetstorm1openvas10cvelist1nvd1zdt1prion1mozilla1suse2nessus9freebsd1gentoo1