CVE-2014-1520

MOYENNE 6.9CVE-2014-1520 · Published 30/04/2014 · updated 17/06/2026

En bref

CVE-2014-1520 est une vulnérabilité MOYENNE (CVSS 6.9) touchant firefox (mozilla).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.41%, plus élevée que 35.3% des vulnérabilités.
Correctif : mettre à jour vers 24.5, 29.0 ou plus récent.

Package	Affected versions	Patched versions
firefox mozilla	`≥ 24.0, < 24.5< 29.0`	`24.529.0`

Description

maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.

References

lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html · Third Party Advisory
packetstormsecurity.com/files/161696/Mozilla-Arbitrary-Code-Execution-Privilege-Escalation.html · Third Party Advisory
seclists.org/fulldisclosure/2021/Mar/14 · Mailing List
secunia.com/advisories/59866 · Third Party Advisory
mozilla.org/security/announce/2014/mfsa2014-35.html · Vendor Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Third Party Advisory
securitytracker.com/id/1030163 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Exploit
security.gentoo.org/glsa/201504-01 · Third Party Advisory

Autres vulnérabilités de firefox

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free