CVE-2013-1712 — Mozilla Firefox vulnerability

3 documents3 sources
Severity
6.9MEDIUMNVD
EPSS
0.2%
top 62.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxMozilla ThunderbirdMozilla Thunderbird ESR
Timeline
PublishedAug 7
Latest updateMay 17

Description

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local users to gain privileges via a Trojan horse DLL in (1) the update directory or (2) the current working directory.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages3 packages

▶NVDmozilla/firefox22.0+14
▶NVDmozilla/thunderbird17.0.7+7
▶NVDmozilla/thunderbird_esr8 versions+7

🔴Vulnerability Details

2
GHSA
GHSA-vrw2-q2cc-chx3: Multiple untrusted search path vulnerabilities in updater↗2022-05-17
▶
CVEList
CVE-2013-1712: Multiple untrusted search path vulnerabilities in updater↗2013-08-07
▶
CVE-2013-1712 — Mozilla Firefox vulnerability | cvebase