Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade libxulUpgrade linux-firefox | Dec 10, 2025 | Nov 20, 2012 |
| Gentoo Linux | — | Upgrade www-client/icecat.Upgrade net-libs/xulrunner.Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/seamonkey.Upgrade www-client/mozilla-firefox-bin.Upgrade dev-libs/nss.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade net-libs/xulrunner-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Nov 21, 2012 |
| Mfsa2012 98 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 18.0Upgrade to Mozilla Firefox version 17.0Upgrade to Mozilla Firefox ESR version 17.0.1Upgrade to Mozilla Firefox ESR version 10.0.11Upgrade to Mozilla Firefox ESR version 10.0.12 | Nov 21, 2012 | Nov 20, 2012 |
| Suse | — | Upgrade MozillaFirefox-translationsUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade mozilla-nss-x86Upgrade MozillaFirefoxUpgrade mozilla-nss-develUpgrade libfreebl3-x86Upgrade mozilla-nss-32bitUpgrade mozilla-nss-tools | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub