CVE:CVE-2023-29541
CNNVD:CNNVD-202304-919
Mozilla Firefox ESR是美国Mozilla基金会的Firefox(Web浏览器)的一个延长支持版本。
Mozilla Firefox ESR 102.10（Firefox for Linux）之前版本存在安全漏洞，该漏洞源于Firefox 没有正确处理以.desktop结尾的文件的下载，攻击者利用该漏洞可以运行命令。
solution:Upgrade mozilla firefox to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla firefox_esr to a higher version than 102.10,and avoid the version (,102.10); Upgrade mozilla focus to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla thunderbird to a higher version than 102.10,and avoid the version (,102.10)