CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
Percentile
5.1%
A local attacker can trick the Mozilla Maintenance Service into applying an
unsigned update file by pointing the service at an update file on a
malicious SMB server. The update file can be replaced after the signature
check, before the use, because the write-lock requested by the service does
not work on a SMB server. Note: This attack requires local system access
and only affects Windows. Other operating systems are not affected. This
vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird
< 102.10.
Author | Note |
---|---|
tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
rodrigo-zaiden | macOS issue only |
launchpad.net/bugs/cve/CVE-2023-29532
nvd.nist.gov/vuln/detail/CVE-2023-29532
security-tracker.debian.org/tracker/CVE-2023-29532
www.cve.org/CVERecord?id=CVE-2023-29532
www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29532
www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29532
www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-29532