NVD

Id
25928  
Name
CVE-2015-4505  
Description
updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-24  
Modified Date
2016-12-21  
Seq
2015-4505  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136958 25928 CVE-2015-4505 openSUSE-SU-2015:1658  View
136959 25928 CVE-2015-4505 openSUSE-SU-2015:1679  View
136960 25928 CVE-2015-4505 openSUSE-SU-2015:1681  View
136961 25928 CVE-2015-4505 http://www.mozilla.org/security/announce/2015/mfsa2015-100.html  View
136962 25928 CVE-2015-4505 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
136963 25928 CVE-2015-4505 1033640  View
136964 25928 CVE-2015-4505 https://bugzilla.mozilla.org/show_bug.cgi?id=1177861  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9539 JVNDB-2015-004859 Windows 上で稼動する Mozilla Firefox の updater.exe における任意のファイルに書き込まれる脆弱性 Windows 上で稼動する Mozilla Firefox の updater.exe には、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2015-4505 81730 CVE-2015-4505 25928 6.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004859.html 2015-09-22 2015-09-28 View