CVE-2013-1712

CVE-2013-1712 describes multiple untrusted search path vulnerabilities in the Mozilla Updater (updater.exe) affecting Mozilla Firefox, Firefox ESR, Thunderbird, and Thunderbird ESR on specific Windows operating systems. This flaw allows a local attacker to gain elevated privileges by introducing a malicious DLL into the update or current working directory. With a CVSS score of 6.9 (High), the vulnerability requires local access and medium attack complexity but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.