Mozilla Firefox and Thunderbird User-Assisted Code Execution Vulnerability via 'Copy as cURL' Feature

A vulnerability allowing user-assisted code execution has been identified in the 'Copy as cURL' feature of Mozilla Firefox and Thunderbird. This issue arises from insufficient escaping, which could potentially trick users into executing unexpected code on Windows. The vulnerability is present in Firefox versions prior to 144, Firefox ESR versions prior to 140.4, Thunderbird versions prior to 144, and Thunderbird ESR versions prior to 140.4.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the user's Windows system.

Remediation

Users can upgrade to Firefox 144, Firefox ESR 140.4, Thunderbird 144, or Thunderbird ESR 140.4 to address this vulnerability.