CVE-2010-3181

MEDIUM

Description

Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.

References

http://www.mozilla.org/security/announce/2010/mfsa2010-71.html

https://bugzilla.mozilla.org/show_bug.cgi?id=589190

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12116

Details

Source: MITRE

Published: 2010-10-21

Updated: 2017-09-19

Risk Information

CVSS v2.0

Base Score: 6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.4

Severity: MEDIUM