CVE-2013-1673

Published: May 16, 2013Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."

Affected (5)

Products: Mozilla: Firefox

1 product

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 20.0.1
Mozilla Firefox	Version 19.0.1
Mozilla Firefox	Version 19.0.2
Mozilla Firefox	Version 19.0
Mozilla Firefox	Version 20.0

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

References (6)

http://www.mozilla.org/security/announce/2013/mfsa2013-45.html

Source: security@mozilla.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=854088

Source: security@mozilla.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17125

Source: security@mozilla.org

http://www.mozilla.org/security/announce/2013/mfsa2013-45.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=854088

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17125

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.