CVE-2025-2817

{"id": "CVE-2025-2817", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2025-04-29T14:15:32.220", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1917536", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-28/", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-29/", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-30/", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-31/", "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-32/", "source": "security@mozilla.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10."}, {"lang": "es", "value": "El mecanismo de actualizaci\u00f3n de Mozilla Firefox permit\u00eda que un proceso de usuario de integridad media interfiriera con el actualizador a nivel de SYSTEM manipulando el comportamiento de bloqueo de archivos. Al inyectar c\u00f3digo en el proceso con privilegios de usuario, un atacante pod\u00eda eludir los controles de acceso previstos, lo que permit\u00eda operaciones con archivos a nivel de SYSTEM en rutas controladas por un usuario sin privilegios y habilitaba la escalada de privilegios. Esta vulnerabilidad afecta a Firefox &lt; 138, Firefox ESR &lt; 128.10, Firefox ESR &lt; 115.23, Thunderbird &lt; 138 y Thunderbird ESR &lt; 128.10."}], "lastModified": "2025-05-02T13:53:49.480", "sourceIdentifier": "security@mozilla.org"}