VULNERABILITY INTELLIGENCE

CVE-2015-4505

CVSS score6.6 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2015-09-24
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:C/A:C

Description

updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service.

Primary references