PT-2015-5856

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 38.0 Description The issue is related to the update implementation in Mozilla Firefox on Windows, where it does not properly verify the pathname for updater.exe, potentially allowing local users to gain...

CVE-2015-0833

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in 1 the current working...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in 1 the current working...

CVE-2015-0833

CVE-2015-0833 affects Mozilla Firefox (pre-36.0), Firefox ESR (pre-31.x up to 31.5), and Thunderbird (pre-31.5) on Windows. It is a local privilege-escalation via untrusted search paths where a Trojan horse DLL (e.g., bcrypt.dll) in the current working directory or a temporary directory is loaded...

CVE-2015-0833: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in 1 the current working...

PT-2015-4902

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Firefox ESR versions prior to 31.5 Thunderbird versions prior to 31.5 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory or a temporary...

Mozilla Thunderbird ESR Multiple Vulnerabilities (Aug 2013) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2013) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2013-1712

CVE-2013-1712 affects Mozilla updater in Firefox (before 23.0) and Firefox ESR 17.x (before 17.0.8), as well as Thunderbird (before 17.0.8 and ESR 17.x before 17.0.8) on Windows 7/Server 2008 R2/8/Server 2012. The issue is a local privilege escalation via untrusted search path Trojan horse DLLs l...

CVE-2013-1712: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local...

Mozilla Products Updater Service Privilege Escalation Vulnerabilities - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1943

Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory...

CVE-2012-1943

CVE-2012-1943 involves an untrusted search path vulnerability in Updater.exe of the Mozilla Updater Service on Windows, affecting Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9. The issue allows local privilege escalation through loading a Trojan horse wsock32.dll located in an application dir...

PT-2012-3674

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 12.0 Thunderbird version 12.0 SeaMonkey version 2.9 Description The issue is related to an untrusted search path vulnerability in the Updater.exe component of the Windows Updater Service. This vulnerability allows local...

CVE-2012-1943: Undefined Security Weakness

Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory...