Mozilla has a flurry of random vulnerabilities surrounding their installers that haven't been addressed in quite some time.
b102795220f359831e9aaf51558fd518c42ae77372b502782bce1f141699f749
The fix applied for CVE-2014-1520 does not fix a DLL hijacking issue with Mozilla Firefox's executable installer.
e199135bedf5e3f7e1d5caca9f00c1556e12da31282d21a64a24691d122836fc