PT-2009-5407
CVE-2009-3076
·
Published
2009-09-09
·
Updated
2017-09-19
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to 3.0.14
Description:
The issue is related to the improper implementation of certain dialogs associated with the
pkcs11.addmodule and pkcs11.deletemodule operations. This makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.Recommendations:
For versions prior to 3.0.14, update to version 3.0.14 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾