CVE-2012-4206 in Firefox

Summary

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 08/08/2012
• Disclosure: 11/21/2012
• Moderation: VulDB entry created
• Entries: VDB-6980 (1)
• CPE: ready
• CWE: CWE-426 (Confirmed)
• CVSS: 6.6
• EPSS: 0.00166
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4206
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4206
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4206/