36669Third-party advisory
http://secunia.com/advisories/36669 CVE-2009-3076
Mozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule
Record summary
CVE-2009-3076 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmoduleExploitDB exploitby Dan KaminskyNot analyzed1 file
References
Showing 12 of 2136670Third-party advisory
http://secunia.com/advisories/36670 36671Third-party advisory
http://secunia.com/advisories/36671 36692Third-party advisory
http://secunia.com/advisories/36692 37098Third-party advisory
http://secunia.com/advisories/37098 DSA-1885Vendor advisory
http://www.debian.org/security/2009/dsa-1885 mozilla.orgConfirmation
http://www.mozilla.org/security/announce/2009/mfsa2009-48.html SUSE-SA:2009:048Vendor advisory
http://www.novell.com/linux/security/advisories/2009_48_firefox.html RHSA-2009:1430Vendor advisory
http://www.redhat.com/support/errata/RHSA-2009-1430.html RHSA-2009:1431Vendor advisory
http://www.redhat.com/support/errata/RHSA-2009-1431.html RHSA-2009:1432Vendor advisory
http://www.redhat.com/support/errata/RHSA-2009-1432.html RHSA-2010:0153Vendor advisory
http://www.redhat.com/support/errata/RHSA-2010-0153.html