Vulnerability in Mozilla Firefox

CVE-2023-29541

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating system…

EPSS: 0.002 (43.2th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox — versions unspecified
Mozilla Firefox Esr — versions unspecified
Mozilla Firefox For Android — versions unspecified
Mozilla Focus For Android — versions unspecified
Mozilla Thunderbird — versions unspecified

References