vulnerability

Gentoo Linux: CVE-2016-5294: Mozilla Firefox, Thunderbird: Multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:N/I:P/A:N)

Published

Jan 3, 2017

Added

Oct 30, 2017

Modified

Mar 31, 2026

Description

The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Solutions

gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin

References

CVE-2016-5294
https://attackerkb.com/topics/CVE-2016-5294
CWE-20
EUVD-EUVD-2016-6245
GENTOO-201701-15
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-6245

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report