PT-2009-5407 · Mozilla+1 · Firefox+1

Dan Kaminsky · Published 2009-09-09 · Updated 2017-09-19 · CVE-2009-3076

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.14

Description: The issue is related to the improper implementation of certain dialogs associated with the pkcs11.addmodule and pkcs11.deletemodule operations. This makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

Recommendations: For versions prior to 3.0.14, update to version 3.0.14 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2009-3076

DSA-1885-1

RHSA-2009:1430

RHSA-2009:1431

RHSA-2009:1432

RHSA-2009_1430

RHSA-2009_1431

RHSA-2010:0153

RHSA-2010:0154

RHSA-2010_0153

RHSA-2010_0154

Affected Products

Firefox

Red Hat

References · 70

• 🔥 https://exploit-db.com/exploits/9651 · Exploit
• http://redhat.com/support/errata/RHSA-2010-0154.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02140 · Security Note
• https://bdu.fstec.ru/vul/2015-02139 · Security Note
• https://bdu.fstec.ru/vul/2015-02611 · Security Note
• http://debian.org/security/2009/dsa-1885 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01736 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1432.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-1430.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02610 · Security Note
• https://bdu.fstec.ru/vul/2015-02147 · Security Note
• https://bdu.fstec.ru/vul/2015-02145 · Security Note
• https://bdu.fstec.ru/vul/2015-01739 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1431.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02141 · Security Note