CVE-2014-1520: Medium severity Mozilla Firefox vulnerability
maintenserviceinstaller.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1520?
CVE-2014-1520 has a CVSS score that suggests a significant risk for local privilege escalation.
How do I fix CVE-2014-1520?
To remediate CVE-2014-1520, update Mozilla Firefox to version 29.0 or later, or Firefox ESR to version 24.5 or later.
Who is affected by CVE-2014-1520?
CVE-2014-1520 affects users of Mozilla Firefox versions prior to 29.0 and Firefox ESR versions from 24.0 to 24.5 on Windows platforms.
What type of vulnerability is CVE-2014-1520?
CVE-2014-1520 is a local privilege escalation vulnerability caused by incorrect handling of a temporary directory.
Can CVE-2014-1520 be exploited remotely?
CVE-2014-1520 cannot be exploited remotely, as it requires local access to the affected system.