Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-3367

Опубликовано: 29 нояб. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:arora-browser:arora:0.11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.00131
Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 14 лет назад

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

debian
около 14 лет назад

Arora, possibly 0.11 and other versions, does not use a certain font w ...

github
больше 3 лет назад

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

EPSS

Процентиль: 33%
0.00131
Низкий

5 Medium

CVSS2

Дефекты

CWE-20