The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Firefox |
Mozilla |
* |
47.0.1 |
References