medium6.9
CVE-2012-4206
Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain p…
Impact
Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | through 16.0.2 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html
- http://www.mozilla.org/security/announce/2012/mfsa2012-98.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=792106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80176
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16991
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html
- http://www.mozilla.org/security/announce/2012/mfsa2012-98.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=792106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80176
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16991