Description
Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
Published: 2012-11-21
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2012-4150 Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
History

Mon, 21 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr

Mon, 21 Oct 2024 13:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:10.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:10.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:10.0.9:*:*:*:*:*:*:*

Subscriptions

Microsoft Windows
Mozilla Firefox
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T20:28:07.626Z

Reserved: 2012-08-08T00:00:00.000Z

Link: CVE-2012-4206

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-11-21T12:55:01.930

Modified: 2026-04-29T01:13:23.040

Link: CVE-2012-4206

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses