6.9

CVE-2013-1673

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 20.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version20.0
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.111
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C