CVE

Id
78096  
CVE No.
CVE-2015-0833  
Status
Candidate  
Description
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714556 78096 CVE-2015-0833 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-12.html  View
714557 78096 CVE-2015-0833 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=945192  View
714558 78096 CVE-2015-0833 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714559 78096 CVE-2015-0833 GENTOO:GLSA-201504-01  View
714560 78096 CVE-2015-0833 URL:https://security.gentoo.org/glsa/201504-01  View
714561 78096 CVE-2015-0833 SUSE:openSUSE-SU-2015:0567  View
714562 78096 CVE-2015-0833 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html  View
714563 78096 CVE-2015-0833 SUSE:openSUSE-SU-2015:0570  View
714564 78096 CVE-2015-0833 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714565 78096 CVE-2015-0833 SUSE:openSUSE-SU-2015:1266  View
714566 78096 CVE-2015-0833 URL:http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html  View
714567 78096 CVE-2015-0833 BID:72747  View
714568 78096 CVE-2015-0833 URL:http://www.securityfocus.com/bid/72747  View
714569 78096 CVE-2015-0833 SECTRACK:1031791  View
714570 78096 CVE-2015-0833 URL:http://www.securitytracker.com/id/1031791  View
714571 78096 CVE-2015-0833 SECTRACK:1031792  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5525 JVNDB-2015-000032 checkpw におけるサービス運用妨害 (DoS) の脆弱性 checkpw は、パスワード認証プログラムです。checkpw には、アカウント名の処理に起因するサービス運用妨害 (DoS) の脆弱性が存在します (CWE-400)。 CVE-2015-0885 78096 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000032.html  View