7.1
CVSSv2

CVE-2011-3640

Published: 28/10/2011 Updated: 17/05/2024
CVSS v2 Base Score: 7.1 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 632
Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome prior to 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Debian Bug report logs - #647614 CVE-2011-3640 Package: nss; Maintainer for nss is Maintainers of Mozilla-related packages <team+pkg-mozilla@trackerdebianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Fri, 4 Nov 2011 14:45:04 UTC Severity: normal Tags: security Fixed in versions nss/313 ...
This update to the NSS cryptographic libraries revokes the trust in the DigiCert Sdn Bhd certificate authority More information can be found in the Mozilla Security Blog This update also fixes an insecure load path for pkcs11txt configuration file (CVE-2011-3640) For the oldstable distribution (lenny), this problem has been fixed in version 3 ...