CVE Database
/

CVE-2011-2980

Back to search

CVE-2011-2980

Published: Aug 18, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2011:127
vendor-advisory
x_refsource_MANDRIVA
SUSE-SU-2011:0967
vendor-advisory
x_refsource_SUSE
SUSE-SA:2011:037
vendor-advisory
x_refsource_SUSE
oval:org.mitre.oval:def:14436
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now