CVE-2013-1715: Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla...

Security readout for executives and security teams

This CVE affects old Mozilla Firefox Windows installers before version 23.0. A local attacker could abuse the installer’s search path behavior so it loads a malicious DLL from the default Downloads directory, potentially gaining privileges. The source bundle does not show active exploitation. Exposure is likely limited to Windows environments that still retain or execute Firefox full or stub installers older than 23.0. Current Firefox installations are not identified as affected by the provided description; the installer packages are the named component. Treat this as legacy exposure cleanup, not an internet-wide emergency. Prioritize if your organization still distributes old Firefox installers or allows unmanaged local installer execution on Windows endpoints. Mitigation focus: Retire Firefox Windows full and stub installers older than 23.0.; Use Mozilla Firefox installers version 23.0 or later.; Check Mozilla MFSA-2013-74 and Bugzilla 883165 for vendor-specific guidance..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.