Seb Patane

**Nome do software vulnerável e versões afetadas** Versões do Firefox anteriores à 97 Versões do Thunderbird anteriores à 91.6 Versões do Firefox ESR anteriores à 91.6 **Descrição** Existia um bug do tipo “Time-of-Check Time-of-Use” no Serviço de Manutenção (Updater) que poderia ser explorado para conceder aos usuários acesso de gravação a um diretório arbitrário, levando potencialmente à escalada de privilégios para o nível do SISTEMA. Este problema afeta apenas o Firefox no Windows; outros sistemas operacionais não são afetados. **Recomendações** Para versões do Firefox anteriores à 97, atualize para o Firefox 97 ou posterior para resolver o problema. Para versões do Thunderbird anteriores à 91.6, atualize para o Thunderbird 91.6 ou posterior para resolver o problema. Para versões do Firefox ESR anteriores à 91.6, atualize para o Firefox ESR 91.6 ou posterior para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 69 Firefox ESR versions prior to 68.1 **Description** The issue is caused by errors in synchronization when using a shared resource in the Mozilla Maintenance Service of Firefox ESR and Firefox browsers. This can allow an attacker to elevate their privileges. Specifically, the Maintenance Service does not prevent files from being hardlinked to another file in the updates directory, which can lead to the replacement of local files, including the Maintenance Service executable that runs with privileged access. A race condition during checks for junctions and symbolic links can also allow for undetected local file and directory manipulation in some cases. This vulnerability requires local system access and only affects Windows. **Recommendations** For Firefox versions prior to 69, update to version 69 or later to resolve the issue. For Firefox ESR versions prior to 68.1, update to version 68.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue allows an unprivileged user to read 32 bytes of any arbitrary file on the local system by exploiting the Mozilla Maintenance Service. This service executes with privileged access, bypassing system protections against unprivileged users. The attack requires local system access and only affects Windows, with other operating systems not being affected. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue allows an unprivileged user to invoke the Mozilla Maintenance Service and overwrite arbitrary files with junk data using the Mozilla Windows Updater, which has privileged access. This requires local system access and only affects Windows operating systems. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue involves manipulation of the `updater.ini` contents used by the Mozilla Windows Updater, allowing for privilege escalation through the Mozilla Maintenance Service. This enables arbitrary file execution and deletion by the Maintenance Service, which has privileged access. The attack requires local system access and only affects Windows, with other operating systems not being affected. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 23.0 Firefox ESR versions 17.x prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions 17.x prior to 17.0.8 **Description** A stack-based buffer overflow issue exists in the Mozilla Maintenance Service, specifically in maintenanceservice.exe. This issue allows local users to gain privileges via a long pathname on the command line. **Recommendations** For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 23.0 Firefox ESR versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions prior to 17.0.8 **Description** A stack-based buffer overflow issue exists in the Mozilla Updater component of Mozilla Firefox, allowing local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service. **Recommendations** For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions prior to 17.0.8, update to version 17.0.8 or later.