Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xrw9-71ea-uqem
Vulnerability ID VCID-xrw9-71ea-uqem
Aliases CVE-2013-1715
Summary Security researcher Robert Kugler reported in 2012 that when a specifically named DLL file on a Windows computer is placed in the default downloads directory with the Firefox installer, the Firefox installer will load this DLL file when it is launched. Mozilla developers Brian Bondy and Robert Strong then discovered that the stub installer was vulnerable to this same issue with a number of DLL files and there were additionally vulnerable named DLL files with the full installer. In circumstances where an installer is run by an administrator privileged account, this allows for a downloaded DLL file to be run with those administrator privileges.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
epss 0.00166 https://api.first.org/data/v1/epss?cve=CVE-2013-1715
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2013-74
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2013-1715
CVE-2013-1715 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1715
mfsa2013-74 https://www.mozilla.org/en-US/security/advisories/mfsa2013-74
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.37599
EPSS Score 0.00166
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:17:38.921524+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2013/mfsa2013-74.md 38.0.0