Seb Patane

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 97 Thunderbird versions prior to 91.6 Firefox ESR versions prior to 91.6 **Description** A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant users write access to an arbitrary directory, potentially leading to SYSTEM access escalation. This issue only affects Firefox on Windows, with other operating systems being unaffected. **Recommendations** For Firefox versions prior to 97, update to Firefox 97 or later to resolve the issue. For Thunderbird versions prior to 91.6, update to Thunderbird 91.6 or later to resolve the issue. For Firefox ESR versions prior to 91.6, update to Firefox ESR 91.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 69 Firefox ESR versions prior to 68.1 **Description** The issue is caused by errors in synchronization when using a shared resource in the Mozilla Maintenance Service of Firefox ESR and Firefox browsers. This can allow an attacker to elevate their privileges. Specifically, the Maintenance Service does not prevent files from being hardlinked to another file in the updates directory, which can lead to the replacement of local files, including the Maintenance Service executable that runs with privileged access. A race condition during checks for junctions and symbolic links can also allow for undetected local file and directory manipulation in some cases. This vulnerability requires local system access and only affects Windows. **Recommendations** For Firefox versions prior to 69, update to version 69 or later to resolve the issue. For Firefox ESR versions prior to 68.1, update to version 68.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue allows an unprivileged user to read 32 bytes of any arbitrary file on the local system by exploiting the Mozilla Maintenance Service. This service executes with privileged access, bypassing system protections against unprivileged users. The attack requires local system access and only affects Windows, with other operating systems not being affected. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue allows an unprivileged user to invoke the Mozilla Maintenance Service and overwrite arbitrary files with junk data using the Mozilla Windows Updater, which has privileged access. This requires local system access and only affects Windows operating systems. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.2 Firefox versions prior to 54 **Description** The issue involves manipulation of the `updater.ini` contents used by the Mozilla Windows Updater, allowing for privilege escalation through the Mozilla Maintenance Service. This enables arbitrary file execution and deletion by the Maintenance Service, which has privileged access. The attack requires local system access and only affects Windows, with other operating systems not being affected. **Recommendations** For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Firefox versions prior to 54, update to version 54 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 23.0 Firefox ESR versions 17.x prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions 17.x prior to 17.0.8 **Description** A stack-based buffer overflow issue exists in the Mozilla Maintenance Service, specifically in maintenanceservice.exe. This issue allows local users to gain privileges via a long pathname on the command line. **Recommendations** For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions 17.x prior to 17.0.8, update to version 17.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 23.0 Firefox ESR versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR versions prior to 17.0.8 **Description** A stack-based buffer overflow issue exists in the Mozilla Updater component of Mozilla Firefox, allowing local users to gain privileges via a long pathname on the command line to the Mozilla Maintenance Service. **Recommendations** For Mozilla Firefox versions prior to 23.0, update to version 23.0 or later. For Firefox ESR versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird versions prior to 17.0.8, update to version 17.0.8 or later. For Thunderbird ESR versions prior to 17.0.8, update to version 17.0.8 or later.