CVE-2011-3640

CVE-2011-3640 describes an untrusted search path vulnerability in Mozilla Network Security Services (NSS), specifically affecting Google Chrome versions prior to 17 on Windows and Mac OS X. A local, authenticated attacker could potentially gain elevated privileges by placing a malicious pkcs11.txt file in a top-level directory. This vulnerability has a CVSS score of 7.1, indicating high severity with high impact on confidentiality, integrity, and availability, though it requires high attack complexity and user authentication. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.