7.8

CVE-2016-5295

EPSS 0.08%
Published 11.06.2018 21:29:00
Last modified 21.11.2024 02:54:01
Source security@mozilla.org
Teams watchlist Login
Open Login

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.

Affected products Warnungen 0 Metrics 3 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 50.0

Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.242

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://www.securityfocus.com/bid/94337

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037298

Third Party Advisory

VDB Entry

https://www.mozilla.org/security/advisories/mfsa2016-89/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1247239

Vendor Advisory

Issue Tracking

https://www.mozilla.org/en-US/security/advisories/mfsa2013-44/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-5295

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-5295

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-5295

EUVD