cbcvebase.
CVE-2011-2980
published 2011-08-18

CVE-2011-2980: Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users…

PriorityP426high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.29%
21.7th percentile
Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.

Affected

131 ranges· showing 25
VendorProductVersion rangeFixed in
mozillafirefox<= 3.6.19—
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
mozillafirefox——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.