CVE-2012-3974

Published: Aug 29, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory.

Affected (262)

Products: Mozilla: Firefox, Thunderbird, Thunderbird Esr

3 products

Configuration A

144 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Up to 14.0
Mozilla Firefox	Version 1.0.1
Mozilla Firefox	Version 1.0.2
Mozilla Firefox	Version 1.0.3
Mozilla Firefox	Version 1.0.4
Mozilla Firefox	Version 1.0.5
Mozilla Firefox	Version 1.0.6
Mozilla Firefox	Version 1.0.7
Mozilla Firefox	Version 1.0.8
Mozilla Firefox	Version 1.0
Mozilla Firefox	Version 1.0 preview_release
Mozilla Firefox	Version 1.4.1
Mozilla Firefox	Version 1.5.0.10
Mozilla Firefox	Version 1.5.0.11
Mozilla Firefox	Version 1.5.0.12
Mozilla Firefox	Version 1.5.0.1
Mozilla Firefox	Version 1.5.0.2
Mozilla Firefox	Version 1.5.0.3
Mozilla Firefox	Version 1.5.0.4
Mozilla Firefox	Version 1.5.0.5
Mozilla Firefox	Version 1.5.0.6
Mozilla Firefox	Version 1.5.0.7
Mozilla Firefox	Version 1.5.0.8
Mozilla Firefox	Version 1.5.0.9
Mozilla Firefox	Version 1.5.1
Mozilla Firefox	Version 1.5.2
Mozilla Firefox	Version 1.5.3
Mozilla Firefox	Version 1.5.4
Mozilla Firefox	Version 1.5.5
Mozilla Firefox	Version 1.5.6
Mozilla Firefox	Version 1.5.7
Mozilla Firefox	Version 1.5.8
Mozilla Firefox	Version 1.5
Mozilla Firefox	Version 1.5 beta1
Mozilla Firefox	Version 1.5 beta2
Mozilla Firefox	Version 1.8
Mozilla Firefox	Version 11.0
Mozilla Firefox	Version 12.0
Mozilla Firefox	Version 12.0 beta6
Mozilla Firefox	Version 13.0
Mozilla Firefox	Version 2.0.0.10
Mozilla Firefox	Version 2.0.0.11
Mozilla Firefox	Version 2.0.0.12
Mozilla Firefox	Version 2.0.0.13
Mozilla Firefox	Version 2.0.0.14
Mozilla Firefox	Version 2.0.0.15
Mozilla Firefox	Version 2.0.0.16
Mozilla Firefox	Version 2.0.0.17
Mozilla Firefox	Version 2.0.0.18
Mozilla Firefox	Version 2.0.0.19
Mozilla Firefox	Version 2.0.0.1
Mozilla Firefox	Version 2.0.0.20
Mozilla Firefox	Version 2.0.0.2
Mozilla Firefox	Version 2.0.0.3
Mozilla Firefox	Version 2.0.0.4
Mozilla Firefox	Version 2.0.0.5
Mozilla Firefox	Version 2.0.0.6
Mozilla Firefox	Version 2.0.0.7
Mozilla Firefox	Version 2.0.0.8
Mozilla Firefox	Version 2.0.0.9
Mozilla Firefox	Version 2.0
Mozilla Firefox	Version 3.0.10
Mozilla Firefox	Version 3.0.11
Mozilla Firefox	Version 3.0.12
Mozilla Firefox	Version 3.0.13
Mozilla Firefox	Version 3.0.14
Mozilla Firefox	Version 3.0.15
Mozilla Firefox	Version 3.0.16
Mozilla Firefox	Version 3.0.17
Mozilla Firefox	Version 3.0.1
Mozilla Firefox	Version 3.0.2
Mozilla Firefox	Version 3.0.3
Mozilla Firefox	Version 3.0.4
Mozilla Firefox	Version 3.0.5
Mozilla Firefox	Version 3.0.6
Mozilla Firefox	Version 3.0.7
Mozilla Firefox	Version 3.0.8
Mozilla Firefox	Version 3.0.9
Mozilla Firefox	Version 3.0
Mozilla Firefox	Version 3.5.10
Mozilla Firefox	Version 3.5.11
Mozilla Firefox	Version 3.5.12
Mozilla Firefox	Version 3.5.13
Mozilla Firefox	Version 3.5.14
Mozilla Firefox	Version 3.5.15
Mozilla Firefox	Version 3.5.1
Mozilla Firefox	Version 3.5.2
Mozilla Firefox	Version 3.5.3
Mozilla Firefox	Version 3.5.4
Mozilla Firefox	Version 3.5.5
Mozilla Firefox	Version 3.5.6
Mozilla Firefox	Version 3.5.7
Mozilla Firefox	Version 3.5.8
Mozilla Firefox	Version 3.5.9
Mozilla Firefox	Version 3.5
Mozilla Firefox	Version 3.6.10
Mozilla Firefox	Version 3.6.11
Mozilla Firefox	Version 3.6.12
Mozilla Firefox	Version 3.6.13
Mozilla Firefox	Version 3.6.14
Mozilla Firefox	Version 3.6.15
Mozilla Firefox	Version 3.6.16
Mozilla Firefox	Version 3.6.17
Mozilla Firefox	Version 3.6.18
Mozilla Firefox	Version 3.6.19
Mozilla Firefox	Version 3.6.20
Mozilla Firefox	Version 3.6.21
Mozilla Firefox	Version 3.6.22
Mozilla Firefox	Version 3.6.23
Mozilla Firefox	Version 3.6.24
Mozilla Firefox	Version 3.6.25
Mozilla Firefox	Version 3.6.2
Mozilla Firefox	Version 3.6.3
Mozilla Firefox	Version 3.6.4
Mozilla Firefox	Version 3.6.6
Mozilla Firefox	Version 3.6.7
Mozilla Firefox	Version 3.6.8
Mozilla Firefox	Version 3.6.9
Mozilla Firefox	Version 3.6
Mozilla Firefox	Version 4.0.1
Mozilla Firefox	Version 4.0
Mozilla Firefox	Version 4.0 beta10
Mozilla Firefox	Version 4.0 beta11
Mozilla Firefox	Version 4.0 beta12
Mozilla Firefox	Version 4.0 beta1
Mozilla Firefox	Version 4.0 beta2
Mozilla Firefox	Version 4.0 beta3
Mozilla Firefox	Version 4.0 beta4
Mozilla Firefox	Version 4.0 beta5
Mozilla Firefox	Version 4.0 beta6
Mozilla Firefox	Version 4.0 beta7
Mozilla Firefox	Version 4.0 beta8
Mozilla Firefox	Version 4.0 beta9
Mozilla Firefox	Version 5.0.1
Mozilla Firefox	Version 5.0
Mozilla Firefox	Version 6.0.1
Mozilla Firefox	Version 6.0.2
Mozilla Firefox	Version 6.0
Mozilla Firefox	Version 7.0.1
Mozilla Firefox	Version 7.0
Mozilla Firefox	Version 8.0.1
Mozilla Firefox	Version 8.0
Mozilla Firefox	Version 9.0.1
Mozilla Firefox	Version 9.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Version 10.0.1
Mozilla Firefox	Version 10.0.2
Mozilla Firefox	Version 10.0.3
Mozilla Firefox	Version 10.0.4
Mozilla Firefox	Version 10.0.5
Mozilla Firefox	Version 10.0.6
Mozilla Firefox	Version 10.0

Configuration C

104 vulnerable

Vulnerable Software	Affected Versions
Mozilla Thunderbird	Up to 14.0
Mozilla Thunderbird	Version 1.0.1
Mozilla Thunderbird	Version 1.0.2
Mozilla Thunderbird	Version 1.0.3
Mozilla Thunderbird	Version 1.0.4
Mozilla Thunderbird	Version 1.0.5
Mozilla Thunderbird	Version 1.0.5 beta
Mozilla Thunderbird	Version 1.0.6
Mozilla Thunderbird	Version 1.0.7
Mozilla Thunderbird	Version 1.0.8
Mozilla Thunderbird	Version 1.0
Mozilla Thunderbird	Version 1.5.0.10
Mozilla Thunderbird	Version 1.5.0.11
Mozilla Thunderbird	Version 1.5.0.12
Mozilla Thunderbird	Version 1.5.0.13
Mozilla Thunderbird	Version 1.5.0.14
Mozilla Thunderbird	Version 1.5.0.1
Mozilla Thunderbird	Version 1.5.0.2
Mozilla Thunderbird	Version 1.5.0.3
Mozilla Thunderbird	Version 1.5.0.4
Mozilla Thunderbird	Version 1.5.0.5
Mozilla Thunderbird	Version 1.5.0.6
Mozilla Thunderbird	Version 1.5.0.7
Mozilla Thunderbird	Version 1.5.0.8
Mozilla Thunderbird	Version 1.5.0.9
Mozilla Thunderbird	Version 1.5.1
Mozilla Thunderbird	Version 1.5.2
Mozilla Thunderbird	Version 1.5
Mozilla Thunderbird	Version 1.5 beta2
Mozilla Thunderbird	Version 1.7.1
Mozilla Thunderbird	Version 1.7.3
Mozilla Thunderbird	Version 10.0.1
Mozilla Thunderbird	Version 10.0.2
Mozilla Thunderbird	Version 10.0.3
Mozilla Thunderbird	Version 10.0.4
Mozilla Thunderbird	Version 10.0
Mozilla Thunderbird	Version 11.0
Mozilla Thunderbird	Version 12.0
Mozilla Thunderbird	Version 13.0
Mozilla Thunderbird	Version 2.0.0.0
Mozilla Thunderbird	Version 2.0.0.11
Mozilla Thunderbird	Version 2.0.0.12
Mozilla Thunderbird	Version 2.0.0.13
Mozilla Thunderbird	Version 2.0.0.14
Mozilla Thunderbird	Version 2.0.0.15
Mozilla Thunderbird	Version 2.0.0.16
Mozilla Thunderbird	Version 2.0.0.17
Mozilla Thunderbird	Version 2.0.0.18
Mozilla Thunderbird	Version 2.0.0.19
Mozilla Thunderbird	Version 2.0.0.1
Mozilla Thunderbird	Version 2.0.0.20
Mozilla Thunderbird	Version 2.0.0.21
Mozilla Thunderbird	Version 2.0.0.22
Mozilla Thunderbird	Version 2.0.0.23
Mozilla Thunderbird	Version 2.0.0.2
Mozilla Thunderbird	Version 2.0.0.3
Mozilla Thunderbird	Version 2.0.0.4
Mozilla Thunderbird	Version 2.0.0.5
Mozilla Thunderbird	Version 2.0.0.6
Mozilla Thunderbird	Version 2.0.0.7
Mozilla Thunderbird	Version 2.0.0.8
Mozilla Thunderbird	Version 2.0.0.9
Mozilla Thunderbird	Version 2.0
Mozilla Thunderbird	Version 3.0.10
Mozilla Thunderbird	Version 3.0.11
Mozilla Thunderbird	Version 3.0.1
Mozilla Thunderbird	Version 3.0.2
Mozilla Thunderbird	Version 3.0.3
Mozilla Thunderbird	Version 3.0.4
Mozilla Thunderbird	Version 3.0.5
Mozilla Thunderbird	Version 3.0.6
Mozilla Thunderbird	Version 3.0.7
Mozilla Thunderbird	Version 3.0.8
Mozilla Thunderbird	Version 3.0.9
Mozilla Thunderbird	Version 3.0
Mozilla Thunderbird	Version 3.1.10
Mozilla Thunderbird	Version 3.1.11
Mozilla Thunderbird	Version 3.1.12
Mozilla Thunderbird	Version 3.1.13
Mozilla Thunderbird	Version 3.1.14
Mozilla Thunderbird	Version 3.1.15
Mozilla Thunderbird	Version 3.1.16
Mozilla Thunderbird	Version 3.1.17
Mozilla Thunderbird	Version 3.1.18
Mozilla Thunderbird	Version 3.1.19
Mozilla Thunderbird	Version 3.1.1
Mozilla Thunderbird	Version 3.1.2
Mozilla Thunderbird	Version 3.1.3
Mozilla Thunderbird	Version 3.1.4
Mozilla Thunderbird	Version 3.1.5
Mozilla Thunderbird	Version 3.1.6
Mozilla Thunderbird	Version 3.1.7
Mozilla Thunderbird	Version 3.1.8
Mozilla Thunderbird	Version 3.1.9
Mozilla Thunderbird	Version 3.1
Mozilla Thunderbird	Version 5.0
Mozilla Thunderbird	Version 6.0.1
Mozilla Thunderbird	Version 6.0.2
Mozilla Thunderbird	Version 6.0
Mozilla Thunderbird	Version 7.0.1
Mozilla Thunderbird	Version 7.0
Mozilla Thunderbird	Version 8.0
Mozilla Thunderbird	Version 9.0.1
Mozilla Thunderbird	Version 9.0

Configuration D

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mozilla Thunderbird Esr	Version 10.0.1
Mozilla Thunderbird Esr	Version 10.0.2
Mozilla Thunderbird Esr	Version 10.0.3
Mozilla Thunderbird Esr	Version 10.0.4
Mozilla Thunderbird Esr	Version 10.0.5
Mozilla Thunderbird Esr	Version 10.0.6
Mozilla Thunderbird Esr	Version 10.0