The vulnerability in the browser update services of Mozilla Firefox, Mozilla Firefox ESR, and the Thunderbird email client for Windows allows a hacker to write state and log files to an unprotected directory.

The vulnerability of the Mozilla Firefox, Mozilla Firefox ESR, and Thunderbird email client for Windows lies in temporal file handling errors. Exploiting this vulnerability allows an attacker to write state files and logs to an unprotected directory...