Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-3033

Опубликовано: 01 апр. 2025
Источник: debian

Описание

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxnot-affectedpackage

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/#CVE-2025-3033

Связанные уязвимости

CVSS3: 7.7
ubuntu
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
nvd
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 7.7
github
4 месяца назад

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 8.1
fstec
4 месяца назад

Уязвимость браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код