6.9

CVE-2013-1673

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 20.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0.1
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version19.0.2
   Microsoft ≫ Windows
Mozilla ≫ Firefox Version20.0
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.111
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C