Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8qj-chqj-f8j2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

EPSS

Процентиль: 25%
0.00087
Низкий

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 7 лет назад

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

CVSS3: 7.8
nvd
больше 7 лет назад

The "pingsender" executable used by the Firefox Health Report dynamically loads a system copy of libcurl, which an attacker could replace. This allows for privilege escalation as the replaced libcurl code will run with Firefox's privileges. Note: This attack requires an attacker have local system access and only affects OS X and Linux. Windows systems are not affected. This vulnerability affects Firefox < 57.

CVSS3: 7.8
debian
больше 7 лет назад

The "pingsender" executable used by the Firefox Health Report dynamica ...

CVSS3: 7.8
fstec
больше 8 лет назад

Уязвимость реализации процесса Pingsender браузера Mozilla Firefox, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 25%
0.00087
Низкий

7.8 High

CVSS3

Дефекты

CWE-427