Description
Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory.
References (5)
Core 5
Core References
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146
Vendor Advisory x_refsource_confirm
http://www.mozilla.org/security/announce/2013/mfsa2013-34.html
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=830134
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
Scores
EPSS
0.0041
EPSS Percentile
32.9%
Details
Status
published
Products (29)
mozilla/firefox
19.0
mozilla/firefox
19.0.1
mozilla/firefox
17.0
mozilla/firefox
17.0.1
mozilla/firefox
17.0.2
mozilla/firefox
17.0.3
mozilla/firefox
17.0.4
mozilla/firefox
< 19.0.2
mozilla/seamonkey
2.0 (8 CPE variants)
mozilla/seamonkey
2.0.1
... and 19 more
Published
Apr 03, 2013
Tracked Since
Feb 18, 2026