CVE-2015-4481: Race Condition
Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4481?
CVE-2015-4481 is classified as a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2015-4481?
To fix CVE-2015-4481, update Mozilla Firefox to version 40.0 or later, or use the corresponding patched version of Firefox ESR.
Which versions of Mozilla Firefox are affected by CVE-2015-4481?
CVE-2015-4481 affects Mozilla Firefox versions prior to 40.0 and Firefox ESR versions prior to 38.2.
Is CVE-2015-4481 specific to any operating systems?
Yes, CVE-2015-4481 primarily affects Mozilla Firefox installations on Windows systems.
Can CVE-2015-4481 be exploited remotely?
No, CVE-2015-4481 requires local access to exploit the race condition.