← Database

CVE-2009-3076

CRITICAL CVSS: 9.3 Published: 2009-09-10 Modified: 2026-06-16

Description

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-Other

References