CVE-2013-1673 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-1673 Interim 1 10 2025-11-05T05:26:56Z current 2021-05-30T13:10:11Z 2025-11-05T05:26:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-1673 The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path." The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2013-July/000516.html E-Mail link for SUSE-SU-2013:1152-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 6 MozillaFirefox MozillaFirefox as a component of SUSE Enterprise Storage 6 The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path." CVE-2013-1673 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C