CVE-2012-4206

CVE-2012-4206 describes an untrusted search path vulnerability in the installer for Mozilla Firefox versions prior to 17.0 and Firefox ESR 10.x prior to 10.0.11 on Windows. This flaw allows a local attacker to gain elevated privileges by placing a malicious DLL in the default downloads directory. The vulnerability has a CVSS score of 6.9, indicating high severity due to its potential for complete compromise of confidentiality, integrity, and availability, with a local attack vector and medium attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.