ByteOS Network

NVD Vulnerability Details :

CVE-2012-1943

Deferred

Source-cve@mitre.org

Published At-05 Jun, 2012 | 23:55

Updated At-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Updater.exe in the Windows Updater Service in Mozilla Firefox 12.0, Thunderbird 12.0, and SeaMonkey 2.9 on Windows allows local users to gain privileges via a Trojan horse wsock32.dll file in an application directory.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Mozilla Corporation

>>firefox>>12.0

cpe:2.3:a:mozilla:firefox:12.0:*:*:*:*:*:*:*

Mozilla Corporation

>>seamonkey>>2.9

cpe:2.3:a:mozilla:seamonkey:2.9:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>12.0

cpe:2.3:a:mozilla:thunderbird:12.0:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Evaluator Description

http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html	cve@mitre.org	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-35.html	cve@mitre.org	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=750850	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16924	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mozilla.org/security/announce/2012/mfsa2012-35.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=750850	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16924	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History