Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
Metrics
Affected Vendors & Products
References
History
Mon, 21 Oct 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:mozilla:firefox_esr:10.0.2:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0:*:*:*:*:*:*:* |
|
Vendors & Products |
Mozilla firefox Esr
|
Mon, 21 Oct 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:mozilla:firefox_esr:10.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox_esr:10.0.9:*:*:*:*:*:*:* |
cpe:2.3:a:mozilla:firefox:10.0.10:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.3:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.4:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.5:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.6:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.7:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.8:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:10.0.9:*:*:*:*:*:*:* |

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T20:28:07.626Z
Reserved: 2012-08-08T00:00:00
Link: CVE-2012-4206

No data.

Status : Deferred
Published: 2012-11-21T12:55:01.930
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-4206

No data.