CVE-2016-5253 — Mozilla Firefox vulnerability

CWE-2643 documents3 sources
Severity
4.7MEDIUMNVD
EPSS
0.1%
top 81.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxDebian FirefoxDebian Firefox-esr
Timeline
PublishedAug 5
Latest updateMay 17

Description

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.0 | Impact: 3.6

Affected Packages3 packages

▶NVDmozilla/firefox47.0.1

🔴Vulnerability Details

1
GHSA
GHSA-rw7w-hjmw-gj5r: The Updater in Mozilla Firefox before 48↗2022-05-17
▶

📋Vendor Advisories

1
Debian
CVE-2016-5253: firefox - The Updater in Mozilla Firefox before 48.0 on Windows allows local users to writ...↗2016
▶