CVE-2014-1520
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0...
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
Exploit likelihood
What each source reports
NVD Score used
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
- Record
CVE-2014-1520- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
- Record
CVE-2014-1520- Updated
- 2026-11-02
EUVDEUVD-2014-1596 No score
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
- Record
EUVD-2014-1596- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f8rp-8hgw-hrhp No score
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0...
maintenservice_installer.exe in the Maintenance Service Installer in Mozilla Firefox before 29.0 and Firefox ESR 24.x before 24.5 on Windows allows local users to gain privileges by placing a Trojan horse DLL file into a temporary directory at an unspecified point in the update process.
- Record
GHSA-f8rp-8hgw-hrhp- Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1520 is a medium vulnerability (CVSS 6.9) in Mozilla Firefox, published April 30, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=961676
lists.fedoraproject.org/pipermail/package-announce/2014-May/132332.html
security.gentoo.org/glsa/201504-01
secunia.com/advisories/59866
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
securitytracker.com/id/1030163
Show 6 moreShow less
mozilla.org/security/announce/2014/mfsa2014-35.html
seclists.org/fulldisclosure/2021/Mar/14
packetstormsecurity.com/files/161696/Mozilla-Arbitrary-Code-Execution-Privilege-Escalation.html
nvd.nist.gov/vuln/detail/CVE-2014-1520
github.com/advisories/GHSA-f8rp-8hgw-hrhp