CVE-2013-1672

Publication date 16 May 2013

Last updated 24 July 2024


Ubuntu priority

Description

The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypass integrity verification and gain privileges via vectors involving junctions.

Read the notes from the security team

Status

Package Ubuntu Release Status
firefox 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life
thunderbird 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life

Notes


chrisccoulson

Affects the Mozilla Maintenance Service on Windows only


Access our resources on patching vulnerabilities