NVD

Id
9678  
Name
CVE-2011-2980  
Description
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-18  
Modified Date
2012-04-24  
Seq
2011-2980  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55327 9678 CVE-2011-2980 SUSE-SA:2011:037  View
55328 9678 CVE-2011-2980 SUSE-SU-2011:0967  View
55329 9678 CVE-2011-2980 oval:org.mitre.oval:def:14436  View
55330 9678 CVE-2011-2980 MDVSA-2011:127  View
55331 9678 CVE-2011-2980 http://www.mozilla.org/security/announce/2011/mfsa2011-30.html  View
55332 9678 CVE-2011-2980 https://bugzilla.mozilla.org/show_bug.cgi?id=642469  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31951 JVNDB-2011-002191 Mozilla Firefox における権限昇格の脆弱性 Mozilla Firefox の ThinkPadSensor::Startup 関数には、検索パスに関する処理に不備があるため権限を取得される脆弱性が存在します。 CVE-2011-2980 50887 CVE-2011-2980 9678 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002191.html 2011-08-16 2011-09-07 View