Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8qj-chqj-f8j2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

EPSS

Процентиль: 26%
0.00335
Низкий

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

CVSS3: 7.8
nvd
около 8 лет назад

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

CVSS3: 7.8
debian
около 8 лет назад

The "pingsender" executable used by the Firefox Health Report dynamica ...

CVSS3: 7.8
fstec
почти 9 лет назад

Уязвимость реализации процесса Pingsender браузера Mozilla Firefox, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 26%
0.00335
Низкий

7.8 High

CVSS3

Дефекты

CWE-427