CVE-2016-5295 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-5295 PUBLISHED

Reported by mozilla · Published June 11, 2018

This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.

Affected Products

Vendor	Product	Versions
Mozilla	Firefox	unspecified
Mozilla	Firefox	unspecified

Timeline

Jun 11, 2018 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

94337 vdb-entryx_refsource_BID
x_refsource_CONFIRM
1037298 vdb-entryx_refsource_SECTRACK
x_refsource_CONFIRM
x_refsource_CONFIRM

Open in Interactive Console →