NVD

Id
25904  
Name
CVE-2015-4481  
Description
Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-15  
Modified Date
2016-12-23  
Seq
2015-4481  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136615 25904 CVE-2015-4481 openSUSE-SU-2015:1389  View
136616 25904 CVE-2015-4481 openSUSE-SU-2015:1390  View
136617 25904 CVE-2015-4481 openSUSE-SU-2015:1453  View
136618 25904 CVE-2015-4481 openSUSE-SU-2015:1454  View
136619 25904 CVE-2015-4481 http://www.mozilla.org/security/announce/2015/mfsa2015-84.html  View
136620 25904 CVE-2015-4481 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136621 25904 CVE-2015-4481 1033247  View
136622 25904 CVE-2015-4481 1033372  View
136623 25904 CVE-2015-4481 https://bugzilla.mozilla.org/show_bug.cgi?id=1171518  View
136624 25904 CVE-2015-4481 GLSA-201605-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8848 JVNDB-2015-004168 Windows 上で稼働する Mozilla Firefox の Mozilla Maintenance Service における任意のファイルを書き込まれる脆弱性 Windows 上で稼働する Mozilla Firefox の Mozilla Maintenance Service には、競合状態により、任意のファイルを書き込まれ、その結果権限を取得される脆弱性が存在します。 CVE-2015-4481 81706 CVE-2015-4481 25904 3.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004168.html 2015-08-11 2015-08-19 View