PT-2014-1452 · Mozilla+1 · Firefox Esr+2

Published 2014-04-29 · Updated 2021-03-17 · CVE-2014-1520

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 29.0 Mozilla Firefox ESR versions prior to 24.5

Description The issue allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process. This is related to the maintenservice installer.exe in the Maintenance Service Installer.

Recommendations For Mozilla Firefox versions prior to 29.0, update to version 29.0 or later to resolve the issue. For Mozilla Firefox ESR versions prior to 24.5, update to version 24.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the maintenservice installer.exe to minimize the risk of exploitation.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-269

Related Identifiers

BDU:2015-00417

BDU:2015-00454

CVE-2014-1520

Affected Products

Firefox

Firefox Esr

Suse

References · 16

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=961676 · Exploit
• http://mozilla.org/security/announce/2014/mfsa2014-35.html · Vendor Advisory
• https://security.gentoo.org/glsa/201504-01 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2014-35 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1520 · Security Note
• https://bdu.fstec.ru/vul/2015-00454 · Security Note
• https://bdu.fstec.ru/vul/2015-00417 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-1520 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132437.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html · Vendor Advisory
• http://securitytracker.com/id/1030163 · Note
• http://packetstormsecurity.com/files/161696/Mozilla-Arbitrary-Code-Execution-Privilege-Escalation.html · Note
• http://secunia.com/advisories/59866 · Note
• http://oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Note
• https://t.me/cvenotify/11016 · Telegram Post