CVE-2013-1715 - Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory

Back Back to CVE browser

MEDIUM

Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory

Published Aug 7, 2013

6.9

MEDIUM

CVSS 2.0

EPSS 0.41%

Description

Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory. NOTE: this issue exists because of an incomplete fix for CVE-2012-4206.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.mozilla.org/security/announce/2013/mfsa2013-74.html
x_refsource_CONFIRMVendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=883165
x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18210
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.mozilla.org/security/announce/2013/mfsa2013-74.html		x_refsource_CONFIRMVendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=883165		x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18210		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mozilla

Published Aug 7, 2013

Updated Aug 6, 2024

Reserved Feb 13, 2013

Link CVE-2013-1715

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1715

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-1715