CVE-2023-29541

Published: 2023-06-02T17:15Z

Last Modified: 2025-01-10T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt