CVE-2011-2980

CVE-2011-2980 describes an untrusted search path vulnerability in Mozilla Firefox (before 3.6.20) and Thunderbird (3.x before 3.1.12). This flaw allows a local attacker to gain privileges by placing a malicious DLL in an unspecified directory, which is then loaded by the vulnerable application. With a CVSS score of 7.2, this vulnerability is considered high severity, indicating a low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.