CVE-2015-0833

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on…

published February 25, 2015

CVSS
—
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.5th percentile
Published
2015-02-25T11:00Z
EPSS history
Timeline
  • 25 FEB 11:00Z
    Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on…
    cvelistv5