Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process. Per: http://cwe.mitre.org/data/definitions/426.html
'CWE-426: Untrusted Search Path'
Publication date: Thu, 18 Aug 2011 23:55:00 +0000