CVE-2011-3640

HighCVSS 7.1/10Last modified Jun 16, 2026

Description

Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."

Metrics

CVSS 2.0 7.1/10AV:N/AC:H/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.htmlExploit, Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=97426Exploit, Issue Tracking, Patch, Vendor Advisory
http://securityreason.com/securityalert/8483Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=641052Issue Tracking, Patch, Third Party Advisory
https://hermes.opensuse.org/messages/13154861Broken Link
https://hermes.opensuse.org/messages/13155432Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13414Third Party Advisory
http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.htmlExploit, Third Party Advisory
http://code.google.com/p/chromium/issues/detail?id=97426Exploit, Issue Tracking, Patch, Vendor Advisory
http://securityreason.com/securityalert/8483Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=641052Issue Tracking, Patch, Third Party Advisory
https://hermes.opensuse.org/messages/13154861Broken Link
https://hermes.opensuse.org/messages/13155432Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13414Third Party Advisory

Timeline

Published: Oct 28, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-36429.6Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and CVE-2011-36457.5Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.j CVE-2011-36465.0phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame para CVE-2011-36479.3The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls CVE-2011-36484.3Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7 CVE-2011-36492.6Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end,CVE-2011-36509.3Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files t CVE-2011-365110.0Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a deni CVE-2011-365210.0The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers CVE-2011-36535.0Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver CVE-2011-365410.0The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SV CVE-2011-36559.3Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapp