description: When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 102.1, Firefox < 103, and Thunderbird < 102.1.
problem types: Opening local <code>.lnk</code> files could cause unexpected network loads
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 102.1, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 103, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 102.1, status: affected, versionType: custom
}
