You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2012-35

Mozilla Foundation Security Advisory 2012-35

Title: Privilege escalation through Mozilla Updater and Windows Updater Service
Impact: Critical
Announced: June 5, 2012
Reporter: James Forshaw
Products: Firefox, Thunderbird, SeaMonkey

Fixed in: Firefox 13.0
  Thunderbird 13.0
  SeaMonkey 2.10

Description

Security researcher James Forshaw of Context Information Security found two issues with the Mozilla updater and the Mozilla updater service introduced in Firefox 12 for Windows. The first issue allows Mozilla's updater to load a local DLL file in a privileged context. The updater can be called by the Updater Service or independently on systems that do not use the service. The second of these issues allows for the updater service to load an arbitrary local DLL file, which can then be run with the same system privileges used by the service. Both of these issues require local file system access to be exploitable.

References