VYPR
← All advisories
Unrated severityNVD Advisory· Published May 14, 2015· Updated Jun 17, 2026

CVE-2015-2720

CVE-2015-2720

Description

The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain privileges via a Trojan horse file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mozilla Corporation/Firefox2 versions
    cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=37.0.2
    • (no CPE)range: <38.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.