PT-2012-3673 · Mozilla+1 · Thunderbird+3

Curtis Koenig + 2 · Published 2012-06-05 · Updated 2017-12-29 · CVE-2012-1942

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 12.0 Thunderbird version 12.0 SeaMonkey version 2.9

Description The issue allows local users to gain privileges by loading a DLL file in a privileged context, affecting Mozilla Firefox, Thunderbird, and SeaMonkey on Windows.

Recommendations For Mozilla Firefox version 12.0, consider restricting the loading of DLL files in privileged contexts until a patch is available. For Thunderbird version 12.0, restrict the loading of DLL files in privileged contexts to minimize the risk of exploitation. For SeaMonkey version 2.9, avoid using privileged contexts that may load DLL files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1942

SUSE-SU-2013_1152-1

Affected Products

Firefox

Seamonkey

Suse

Thunderbird

References · 67

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_onreadystatechange.rb · Exploit
• 🔥 https://github.com/vlad902/annotated-fbi-tbb-exploit · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1672 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2013-45 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0797 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0792 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1942 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1673 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0801 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1678 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1679 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1681 · Security Note