QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3974

Published: Aug 29, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

http://www.mozilla.org/security/announce/2012/mfsa2012-67.html

x_refsource_CONFIRM

oval:org.mitre.oval:def:16692

vdb-entry

signature

x_refsource_OVAL

https://bugzilla.mozilla.org/show_bug.cgi?id=770478

x_refsource_CONFIRM

SUSE-SU-2012:1167

vendor-advisory

x_refsource_SUSE

SUSE-SU-2012:1157

vendor-advisory

x_refsource_SUSE

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.