Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2384?format=api",
    "vulnerability_id": "VCID-a3yp-gt8d-9qaw",
    "summary": "Security researcher Robert Kugler reported that when a specifically named DLL file on a Windows computer is placed in the default downloads directory with the Firefox installer, the Firefox installer will load this DLL when it is launched. In circumstances where the installer is run by an administrator privileged account, this allows for the downloaded DLL file to be run with administrator privileges. This can lead to arbitrary code execution from a privileged account. \nAdditional vulnerable DLL file names were found and fixed in Firefox 18.0, Firefox ESR 17.0.1, and Firefox ESR 10.0.12 releases.",
    "aliases": [
        {
            "alias": "CVE-2012-4206"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1050?format=api",
            "purl": "pkg:mozilla/Firefox@17.0.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@17.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/913?format=api",
            "purl": "pkg:mozilla/Firefox@18.0.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@18.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/966?format=api",
            "purl": "pkg:mozilla/Firefox%20ESR@10.0.11",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@10.0.11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/963?format=api",
            "purl": "pkg:mozilla/Firefox%20ESR@10.0.12",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@10.0.12"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1085?format=api",
            "purl": "pkg:mozilla/Firefox%20ESR@17.0.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@17.0.1"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4206",
            "reference_id": "CVE-2012-4206",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4206"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2012-98",
            "reference_id": "mfsa2012-98",
            "reference_type": "",
            "scores": [
                {
                    "value": "high",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2012-98"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a3yp-gt8d-9qaw"
}