medium6.9
CVE-2010-3181
Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey be…
Impact
Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | Versions 3.6, 3.6.2, 3.6.3, 3.6.4, 3.6.6, 3.6.7 |
| Mozilla | Seamonkey | through 2.0.8 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Mozilla | Thunderbird | through 3.0.8 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
References
- NVD record
- CVE.org record
- http://www.mozilla.org/security/announce/2010/mfsa2010-71.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=589190
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12116
- http://www.mozilla.org/security/announce/2010/mfsa2010-71.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=589190
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12116