Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Firefox
Vendor
Mozilla
Product
Firefox
Platforms
Unknown
Default status
Unknown
Firefox · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
112
Unavailable
None listed
Focus for Android
Vendor
Mozilla
Product
Focus for Android
Platforms
Unknown
Default status
Unknown
Focus for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
112
Unavailable
None listed
Firefox ESR
Vendor
Mozilla
Product
Firefox ESR
Platforms
Unknown
Default status
Unknown
Firefox ESR · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
102.10
Unavailable
None listed
Firefox for Android
Vendor
Mozilla
Product
Firefox for Android
Platforms
Unknown
Default status
Unknown
Firefox for Android · Scoped product and version facts