Поиск уязвимостей
Количество 13
Количество 13
BDU:2021-04379
Уязвимость службы Mozilla Maintenance Service браузеров Firefox ESR и Firefox, позволяющая нарушителю повысить свои привилегии
CVE-2019-11736
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
CVE-2019-11736
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
CVE-2019-11736
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
CVE-2019-11736
The Mozilla Maintenance Service does not guard against files being har ...
ALT-PU-2019-2640
ALT-PU-2019-2640: package `firefox-esr` update to version 68.1.0-alt1
GHSA-g4fc-6wpg-63m2
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
ALT-PU-2019-2686
ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1
openSUSE-SU-2019:2260-1
Security update for MozillaFirefox
openSUSE-SU-2019:2251-1
Security update for MozillaFirefox
SUSE-SU-2019:2545-1
Security update for MozillaFirefox
SUSE-SU-2019:2620-1
Security update for MozillaFirefox
SUSE-SU-2019:14246-1
Security update for Mozilla Firefox
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-04379 Уязвимость службы Mozilla Maintenance Service браузеров Firefox ESR и Firefox, позволяющая нарушителю повысить свои привилегии | CVSS3: 7 | 0% Низкий | около 7 лет назад |
 | CVE-2019-11736 The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1. | CVSS3: 7 | 0% Низкий | около 7 лет назад |
 | CVE-2019-11736 The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1. | CVSS3: 7.5 | 0% Низкий | около 7 лет назад |
 | CVE-2019-11736 The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1. | CVSS3: 7 | 0% Низкий | около 7 лет назад |
| CVE-2019-11736 The Mozilla Maintenance Service does not guard against files being har ... | CVSS3: 7 | 0% Низкий | около 7 лет назад |
| ALT-PU-2019-2640 ALT-PU-2019-2640: package `firefox-esr` update to version 68.1.0-alt1 | CVSS3: 9.8 | около 7 лет назад | |
| GHSA-g4fc-6wpg-63m2 The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access. Additionally, there was a race condition during checks for junctions and symbolic links by the Maintenance Service, allowing for potential local file and directory manipulation to be undetected in some circumstances. This allows for potential privilege escalation by a user with unprivileged local access. <br>*Note: These attacks requires local system access and only affects Windows. Other operating systems are not affected.*. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1. | CVSS3: 7 | 0% Низкий | больше 4 лет назад |
| ALT-PU-2019-2686 ALT-PU-2019-2686: package `firefox` update to version 69.0-alt1 | CVSS3: 10 | около 7 лет назад | |
 | openSUSE-SU-2019:2260-1 Security update for MozillaFirefox | около 7 лет назад | ||
| openSUSE-SU-2019:2251-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:2545-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:2620-1 Security update for MozillaFirefox | около 7 лет назад | ||
| SUSE-SU-2019:14246-1 Security update for Mozilla Firefox | почти 7 лет назад |
Уязвимостей на страницу