NVD

Id
23272  
Name
CVE-2015-0833  
Description
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-25  
Modified Date
2016-12-23  
Seq
2015-0833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123566 23272 CVE-2015-0833 openSUSE-SU-2015:0567  View
123567 23272 CVE-2015-0833 openSUSE-SU-2015:1266  View
123568 23272 CVE-2015-0833 openSUSE-SU-2015:0570  View
123569 23272 CVE-2015-0833 http://www.mozilla.org/security/announce/2015/mfsa2015-12.html  View
123570 23272 CVE-2015-0833 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
123571 23272 CVE-2015-0833 72747  View
123572 23272 CVE-2015-0833 1031791  View
123573 23272 CVE-2015-0833 1031792  View
123574 23272 CVE-2015-0833 https://bugzilla.mozilla.org/show_bug.cgi?id=945192  View
123575 23272 CVE-2015-0833 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6291 JVNDB-2015-001611 Windows 上で稼動する Mozilla Firefox および Thunderbird の updater.exe における権限を取得される脆弱性 Windows 上で稼動する Mozilla Firefox および Thunderbird の updater.exe には、Maintenance Service を使用しない場合、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2015-0833 78044 CVE-2015-0833 23272 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001611.html 2015-02-24 2015-02-26 View