CVE-2016-5295
published 2018-06-11CVE-2016-5295: This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater…
PriorityP434high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.33%
25.1th percentile
This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 50.0 | 50.0 |
| mozilla | firefox | >= unspecified < 50 | 50 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_debian7.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2h24-5rmg-2c3m: This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozill
ghsa_unreviewed·2022-05-14
CVE-2016-5295 [HIGH] GHSA-2h24-5rmg-2c3m: This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozill
This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.
Debian
CVE-2016-5295: firefox - This vulnerability allows an attacker to use the Mozilla Maintenance Service to ...
vendor_debian·2016·CVSS 7.8
CVE-2016-5295 [HIGH] CVE-2016-5295: firefox - This vulnerability allows an attacker to use the Mozilla Maintenance Service to ...
This vulnerability allows an attacker to use the Mozilla Maintenance Service to escalate privilege by having the Maintenance Service invoke the Mozilla Updater to run malicious local files. This vulnerability requires local system access and is a variant of MFSA2013-44. Note: this issue only affects Windows operating systems. This vulnerability affects Firefox < 50.
Scope: local
sid: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/94337http://www.securitytracker.com/id/1037298https://bugzilla.mozilla.org/show_bug.cgi?id=1247239https://www.mozilla.org/en-US/security/advisories/mfsa2013-44/https://www.mozilla.org/security/advisories/mfsa2016-89/http://www.securityfocus.com/bid/94337http://www.securitytracker.com/id/1037298https://bugzilla.mozilla.org/show_bug.cgi?id=1247239https://www.mozilla.org/en-US/security/advisories/mfsa2013-44/https://www.mozilla.org/security/advisories/mfsa2016-89/
2018-06-11
Published