CVE-2011-3640
- State
- Published
- Severity
- Not scored
- Published
- Oct 28, 2011
- Updated
- Aug 6, 2024
- Reserved
- Sep 21, 2011
Description
Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- openSUSE-SU-2012:0063vendor-advisory
- openSUSE-SU-2012:0030vendor-advisory
- 8483third-party-advisory
- oval:org.mitre.oval:def:13414vdb-entrysignature
- http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.html
- http://code.google.com/p/chromium/issues/detail?id=97426
- https://bugzilla.mozilla.org/show_bug.cgi?id=641052
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.