Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3076
HistorySep 10, 2009 - 12:00 a.m.

CVE-2009-3076

2009-09-1000:00:00
ubuntu.com
ubuntu.com
9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.906 High

EPSS

Percentile

98.8%

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs
associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule
operations, which makes it easier for remote attackers to trick a user into
installing or removing an arbitrary PKCS11 module.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchfirefox-3.0< 3.0.14+build2+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0< 3.0.14+build2+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchfirefox-3.0< 3.0.14+build2+nobinonly-0ubuntu0.9.04.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9< 1.9.0.14+build2+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9< 1.9.0.14+build2+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchxulrunner-1.9< 1.9.0.14+build2+nobinonly-0ubuntu0.9.04.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.906 High

EPSS

Percentile

98.8%