CVE-2009-3076

Publication date 10 September 2009

Last updated 24 July 2024

Ubuntu priority

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
firefox-3.0	9.04 jaunty	Fixed 3.0.14+build2+nobinonly-0ubuntu0.9.04.1
	8.10 intrepid	Fixed 3.0.14+build2+nobinonly-0ubuntu0.8.10.1
	8.04 LTS hardy	Fixed 3.0.14+build2+nobinonly-0ubuntu0.8.04.1
	6.06 LTS dapper	Not in release
xulrunner-1.9	9.04 jaunty	Fixed 1.9.0.14+build2+nobinonly-0ubuntu0.9.04.1
	8.10 intrepid	Fixed 1.9.0.14+build2+nobinonly-0ubuntu0.8.10.1
	8.04 LTS hardy	Fixed 1.9.0.14+build2+nobinonly-0ubuntu0.8.04.1
	6.06 LTS dapper	Not in release

References

Related Ubuntu Security Notices (USN)

USN-821-1
Firefox and Xulrunner vulnerabilities
10 September 2009

Other references

https://www.cve.org/CVERecord?id=CVE-2009-3076