7.2
CVSSv2

CVE-2011-2980

Published: 18/08/2011 Updated: 19/09/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox prior to 3.6.20, Thunderbird 3.x prior to 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox 3.5.4

mozilla firefox 3.5.5

mozilla firefox 3.0.16

mozilla firefox 3.0.15

mozilla firefox 3.0.8

mozilla firefox 3.0.7

mozilla firefox 3.0

mozilla firefox 2.0.0.14

mozilla firefox 2.0.0.12

mozilla firefox 2.0.0.16

mozilla firefox 2.0.0.11

mozilla firefox 2.0.0.5

mozilla firefox 2.0.0.4

mozilla firefox 1.5.0.3

mozilla firefox 1.5.0.11

mozilla firefox 1.5.1

mozilla firefox 1.5.2

mozilla firefox 1.5.7

mozilla firefox 1.5.6

mozilla firefox 1.0.7

mozilla firefox 1.0.6

mozilla firefox 3.5.15

mozilla firefox 3.5.16

mozilla firefox 3.6.6

mozilla firefox 3.6.7

mozilla firefox 3.6.14

mozilla firefox 3.6.15

mozilla firefox 3.5.6

mozilla firefox 3.5.7

mozilla firefox 3.5.10

mozilla firefox 3.0.14

mozilla firefox 3.0.13

mozilla firefox 3.0.6

mozilla firefox 3.0.5

mozilla firefox 2.0.0.19

mozilla firefox 2.0.0.20

mozilla firefox 2.0.0.15

mozilla firefox 2.0.0.13

mozilla firefox 2.0.0.3

mozilla firefox 2.0.0.2

mozilla firefox 3.5.2

mozilla firefox 3.5.3

mozilla firefox 3.5

mozilla firefox 3.0.17

mozilla firefox 3.0.10

mozilla firefox 3.0.9

mozilla firefox 3.0.2

mozilla firefox 3.0.1

mozilla firefox 2.0.0.17

mozilla firefox 2.0.0.10

mozilla firefox 2.0.0.18

mozilla firefox 2.0.0.6

mozilla firefox 1.5.0.4

mozilla firefox 1.5.0.5

mozilla firefox 1.5.0.2

mozilla firefox 1.5.3

mozilla firefox 1.5.4

mozilla firefox 1.5

mozilla firefox 1.5.8

mozilla firefox 1.0.5

mozilla firefox 1.0.4

mozilla firefox 3.5.13

mozilla firefox 3.5.14

mozilla firefox 3.6.2

mozilla firefox 3.6.8

mozilla firefox 3.5.18

mozilla firefox 3.5.19

mozilla firefox 1.5.0.12

mozilla firefox 1.5.0.1

mozilla firefox 1.5.0.8

mozilla firefox 1.5.0.9

mozilla firefox 1.5.5

mozilla firefox 1.0.1

mozilla firefox 1.0.8

mozilla firefox 1.0

mozilla firefox 3.5.17

mozilla firefox 3.6.4

mozilla firefox 3.6.3

mozilla firefox 3.6.11

mozilla firefox 3.6.10

mozilla firefox 3.6.16

mozilla firefox 3.6.17

mozilla firefox 3.5.1

mozilla firefox 3.5.9

mozilla firefox 3.5.8

mozilla firefox 3.0.12

mozilla firefox 3.0.11

mozilla firefox 3.0.4

mozilla firefox 3.0.3

mozilla firefox 2.0.0.8

mozilla firefox 2.0.0.9

mozilla firefox 2.0.0.7

mozilla firefox 2.0

mozilla firefox 2.0.0.1

mozilla firefox 1.5.0.10

mozilla firefox 1.5.0.6

mozilla firefox 1.5.0.7

mozilla firefox 1.0.3

mozilla firefox 1.0.2

mozilla firefox 3.5.11

mozilla firefox 3.5.12

mozilla firefox 3.6

mozilla firefox 3.6.12

mozilla firefox 3.6.9

mozilla firefox 3.6.13

mozilla firefox 3.6.18

mozilla firefox

mozilla thunderbird 3.0

mozilla thunderbird 3.0.5

mozilla thunderbird 3.0.4

mozilla thunderbird 3.0.10

mozilla thunderbird 3.1.5

mozilla thunderbird 3.0.9

mozilla thunderbird 3.1.2

mozilla thunderbird 3.0.3

mozilla thunderbird 3.0.1

mozilla thunderbird 3.0.11

mozilla thunderbird 3.1.6

mozilla thunderbird 3.0.6

mozilla thunderbird 3.1.1

mozilla thunderbird 3.0.8

mozilla thunderbird 3.0.7

mozilla thunderbird 3.1.4

mozilla thunderbird 3.1.8

mozilla thunderbird 3.1.9

mozilla thunderbird 3.1

mozilla thunderbird 3.0.2

mozilla thunderbird 3.1.7

mozilla thunderbird 3.1.3

mozilla thunderbird 3.1.10

mozilla thunderbird 3.1.11

Vendor Advisories

Mozilla Foundation Security Advisory 2011-30 Security issues addressed in Firefox 3620 Announced August 16, 2011 Impact Critical Products Firefox Fixed in Firefox 3620 ...
Mozilla Foundation Security Advisory 2011-32 Security issues addressed in Thunderbird 3112 Announced August 16, 2011 Impact Critical Products Thunderbird Fixed in Thunderbird 3112 ...