CVE-2009-3076: Mozilla Firefox

High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days.

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.

Affected products

• Mozilla Firefox: up to and including 3.0.13; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2009-09-10. Last modified 2026-06-16.