Unrated severityNVD Advisory· Published Oct 28, 2011· Updated Apr 29, 2026
CVE-2011-3640
CVE-2011-3640
Description
Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.htmlnvdExploitThird Party Advisory
- code.google.com/p/chromium/issues/detailnvdExploitIssue TrackingPatchVendor Advisory
- securityreason.com/securityalert/8483nvdThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13414nvdThird Party Advisory
- hermes.opensuse.org/messages/13154861nvdBroken Link
- hermes.opensuse.org/messages/13155432nvdBroken Link
News mentions
0No linked articles in our index yet.