Description
Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but we're not treating this as a security bug."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 13 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 12 | nss | 3.13.1.with.ckbi.1.88-1 | — |
| Debian 6.0 | nss | 3.12.8-1+squeeze4 | DSA-2339-1 |
| Debian 5.0 | nss | 3.12.3.1-0lenny7 | DSA-2339-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | mozilla-nss | 3.26.2-1.1 | openSUSE-SU-2024:10451-1 |
Advisories 2
- DSA-2339-1 nss - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10451-1 libfreebl3-3.26.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- openSUSE-SU-2012:0063 vendor-advisory
- openSUSE-SU-2012:0030 vendor-advisory
- 8483 third-party-advisory
- oval:org.mitre.oval:def:13414 vdb-entry signature
- http://blog.acrossecurity.com/2011/10/google-chrome-pkcs11txt-file-planting.html
- http://code.google.com/p/chromium/issues/detail?id=97426
- https://bugzilla.mozilla.org/show_bug.cgi?id=641052