CVE-2023-4052

Description

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Scores

Weaknesses (CWE)

• CWE-59

European references

• ENISA EUVD · EUVD-2023-53943
• GCVE · GCVE-0-2023-4052

CERT-FR advisories

• CERTFR-2023-AVI-0613 — Multiples vulnérabilités dans Mozilla Thunderbird · cert.ssi.gouv.fr
• CERTFR-2023-AVI-0611 — Multiples vulnérabilités dans Mozilla Firefox · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* < 116.0
• cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* < 115.1

Affected products

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1824420
• https://www.mozilla.org/security/advisories/mfsa2023-29/
• https://www.mozilla.org/security/advisories/mfsa2023-31/
• https://www.mozilla.org/security/advisories/mfsa2023-33/

Sources