CVE-2012-1943

Published: Jun 5, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory.

Affected (3)

Products: Mozilla: Firefox, Seamonkey, Thunderbird

3 products

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 12.0
Mozilla Seamonkey	Version 2.9
Mozilla Thunderbird	Version 12.0

Running on/with	Platform Versions
Microsoft Windows	All versions

References (8)

http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html

Source: cve@mitre.org

http://www.mozilla.org/security/announce/2012/mfsa2012-35.html

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=750850

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16924

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mozilla.org/security/announce/2012/mfsa2012-35.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=750850

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16924

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.