CVE-2013-1715 PUBLISHED CVSS 6.900000095367432 MEDIUM

Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL in the default downloads directory. NOTE: this issue exists because of an incomplete fix for CVE-2012-4206.

EPSS 0.17% · 37.5th percentile

Risk Scores

CVSS v2.0
6.900000095367432
EPSS Score
0.17%
37.5th percentile

Affected Products

VendorProductVersions
mozillafirefox21.0, 0, 19.0
n/an/an/a

Timeline

References

Open in Interactive Console →