Mozilla Firefox and Thunderbird 'Copy as cURL' Feature Vulnerability Leading to Potential Local Code Execution

A vulnerability exists in Mozilla Firefox versions prior to 138 and Thunderbird versions prior to 138, where the 'copy as cURL' feature fails to properly escape special characters. This flaw could allow an attacker to manipulate a user into executing a crafted cURL command, potentially leading to local code execution on the user's machine.

Impact

Exploitation of this vulnerability could result in unauthorized local code execution on the user's system.

Remediation

Users can update to Firefox 138 or Thunderbird 138 to address this vulnerability.