Privilege Escalation via Mozilla Updater in Mozilla Firefox on Windows

CVE-2013-1673 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path."

Learn more about our Cis Benchmark Audit For Mozilla Firefox.