PT-2009-5407 · Mozilla+1 · Firefox+1

Dan Kaminsky · Publicado 2009-09-09 · Atualizado 2017-09-19 · CVE-2009-3076

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.14

Description: The issue is related to the improper implementation of certain dialogs associated with the pkcs11.addmodule and pkcs11.deletemodule operations. This makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

Recommendations: For versions prior to 3.0.14, update to version 3.0.14 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2009-3076

DSA-1885-1

RHSA-2009:1430

RHSA-2009:1431

RHSA-2009:1432

RHSA-2009_1430

RHSA-2009_1431

RHSA-2010:0153

RHSA-2010:0154

RHSA-2010_0153

RHSA-2010_0154

Produtos afetados

Firefox

Red Hat

Referências · 70

• 🔥 https://exploit-db.com/exploits/9651 · Exploit
• https://github.com/Fullmetal5/str2hax · Nota
• https://access.redhat.com/security/cve/CVE-2009-0689 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3979 · Nota
• http://redhat.com/support/errata/RHSA-2010-0154.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-3077 · Nota
• https://bdu.fstec.ru/vul/2015-02140 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-0169 · Nota
• https://bdu.fstec.ru/vul/2015-02139 · Nota de Segurança
• http://secunia.com/advisories/37098 · Nota
• http://secunia.com/advisories/36669 · Nota
• http://securitytracker.com/id?1022877 · Nota
• https://bdu.fstec.ru/vul/2015-02611 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2009-3074 · Nota
• http://securityfocus.com/archive/1/505242/30/0/threaded · Nota