CVE-2013-1672

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.

Score

CVSS 2.0 6.9 Medium

Status

Modified - security@mozilla.org

Published

2013-05-16

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Firefox (Mozilla)
• Thunderbird (Mozilla)
• Thunderbird Esr (Mozilla)

References

• http://www.mozilla.org/security/announce/2013/mfsa2013-44.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=850492
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16915