NetSight
IP …
low3.3Public exploit code

CVE-2015-4481

Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arb…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file during an update.

Affected products

VendorProductAffected versions
MozillaFirefox
through 39.0.3
Versions 38.0, 38.0.1, 38.0.5, 38.1.0
OpensuseOpensuse
Versions 13.1, 13.2
OracleSolaris
Version 11.3

Weakness classification

CWE-362

References