Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might allow local users to gain privileges via a Trojan horse file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Firefox 代码注入漏洞
Vulnerability Description
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。 基于Windows平台的Mozilla Firefox 37.0.2及之前版本的更新实现过程中存在安全漏洞，该漏洞源于程序没有确保updater.exe文件的路径名与应用程序的目录相对应。本地攻击者可借助Trojan horse文件利用该漏洞获取权限。
CVSS Information
N/A
Vulnerability Type
N/A