CVE-2016-2809
published 2016-04-30CVE-2016-2809: The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging…
PriorityP425medium5.5CVSS 3.0
AVLACLPRNUIRSUCNIHAN
EPSS
1.66%
74.3th percentile
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| debian | firefox-esr | — | — |
| mozilla | firefox | <= 45.0.2 | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4qq8-cxv5-977h: The Mozilla Maintenance Service updater in Mozilla Firefox before 46
ghsa_unreviewed·2022-05-17
CVE-2016-2809 [MEDIUM] GHSA-4qq8-cxv5-977h: The Mozilla Maintenance Service updater in Mozilla Firefox before 46
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
Red Hat
Mozilla: Privilege escalation through file deletion by Maintenance Service updater (MFSA 2016-40)
vendor_redhat·2016-04-26·CVSS 5.5
CVE-2016-2809 [MEDIUM] Mozilla: Privilege escalation through file deletion by Maintenance Service updater (MFSA 2016-40)
Mozilla: Privilege escalation through file deletion by Maintenance Service updater (MFSA 2016-40)
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
Package: firefox (Red Hat Enterprise Linux 5) - Not affected
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
Package: firefox (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2016-2809: firefox - The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Window...
vendor_debian·2016·CVSS 5.5
CVE-2016-2809 [MEDIUM] CVE-2016-2809: firefox - The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Window...
The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
Scope: local
sid: resolved
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.htmlhttp://www.mozilla.org/security/announce/2016/mfsa2016-40.htmlhttp://www.securitytracker.com/id/1035692https://bugzilla.mozilla.org/show_bug.cgi?id=1212939https://security.gentoo.org/glsa/201701-15http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.htmlhttp://www.mozilla.org/security/announce/2016/mfsa2016-40.htmlhttp://www.securitytracker.com/id/1035692https://bugzilla.mozilla.org/show_bug.cgi?id=1212939https://security.gentoo.org/glsa/201701-15
2016-04-30
Published