CVE-2014-1520

Firefox < 29.0 - Privilege Escalation via Trojan Horse DLL in Maintenance Service Installer

Title source: llm
STIX 2.1

Description

maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.

References (10)

Core 10
Core References
Exploit, Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=961676
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201504-01
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59866
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030163
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2021/Mar/14

Scores

EPSS 0.0004
EPSS Percentile 11.9%

Details

CWE
CWE-269
Status published
Products (3)
fedoraproject/fedora 19
fedoraproject/fedora 20
mozilla/firefox < 29.0
Published Apr 30, 2014
Tracked Since Feb 18, 2026