CVE

Id
57217  
CVE No.
CVE-2012-3974  
Status
Candidate  
Description
Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.  
Phase
Assigned (20120711)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590988 57217 CVE-2012-3974 CONFIRM:http://www.mozilla.org/security/announce/2012/mfsa2012-67.html  View
590989 57217 CVE-2012-3974 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=770478  View
590990 57217 CVE-2012-3974 CONFIRM:http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
590991 57217 CVE-2012-3974 SUSE:SUSE-SU-2012:1167  View
590992 57217 CVE-2012-3974 URL:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00014.html  View
590993 57217 CVE-2012-3974 SUSE:SUSE-SU-2012:1157  View
590994 57217 CVE-2012-3974 URL:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00011.html  View
590995 57217 CVE-2012-3974 BID:55312  View
590996 57217 CVE-2012-3974 URL:http://www.securityfocus.com/bid/55312  View
590997 57217 CVE-2012-3974 OVAL:oval:org.mitre.oval:def:16692  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28258 JVNDB-2012-003965 Android 上で稼働する Mozilla Firefox における任意のコードを実行される脆弱性 Android 上で稼働する Mozilla Firefox は、__android_log_print 関数の不特定の呼び出し元を適切に実装しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-3979 57217 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003965.html  View