CVE-2013-1700
Last modified
CVE-2013-1700 is a vulnerability of currently unknown severity. The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater executable file, which allows local users to gain privileges via vectors involving placement of a Trojan horse executable file at an arbitrary location.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | <= 21.0 |
| Mozilla | Firefox | 19.0 |
| Mozilla | Firefox | 19.0.1 |
| Mozilla | Firefox | 19.0.2 |
| Mozilla | Firefox | 20.0 |
| Mozilla | Firefox | 20.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-1700?
How severe is CVE-2013-1700?
How do I fix CVE-2013-1700?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-1694The PreserveWrapper implementation in Mozilla Firefox before…
- CVE-2013-1695Mozilla Firefox before 22.0 does not properly implement cert…
- CVE-2013-1696Mozilla Firefox before 22.0 does not properly enforce the X-…
- CVE-2013-1697The XrayWrapper implementation in Mozilla Firefox before 22.…
- CVE-2013-1698The getUserMedia permission implementation in Mozilla Firefo…
- CVE-2013-1699The Internationalized Domain Name (IDN) display algorithm in…
- CVE-2013-1701Multiple unspecified vulnerabilities in the browser engine i…
- CVE-2013-1702Multiple unspecified vulnerabilities in the browser engine i…
- CVE-2013-1703Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2013-1704Use-after-free vulnerability in the nsINode::GetParentNode f…
- CVE-2013-1705Heap-based buffer underflow in the cryptojs_interpret_key_ge…
- CVE-2013-1706Stack-based buffer overflow in maintenanceservice.exe in the…
Are you affected by CVE-2013-1700?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST