CVE-2011-2980

Name	CVE-2011-2980
Description	Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running Firefox process.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
icedove	source	(unstable)	(not affected)
iceweasel	source	(unstable)	(not affected)
xulrunner	source	(unstable)	(not affected)

Notes

- icedove <not-affected> (Only affects Windows)
- xulrunner <not-affected> (Only affects Windows)
- iceweasel <not-affected> (Only affects Windows)