mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-25 19:40:21 +01:00
1.0 KiB
1.0 KiB
CVE-2016-5294
Description
The Mozilla Updater can be made to choose an arbitrary target working directory for output files resulting from the update process. This vulnerability requires local system access. Note: this issue only affects Windows operating systems. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
POC
Reference
Github
No PoCs found on GitHub currently.