CVE-2011-3367 | BDVDB-2026-48302 Detail

Description#

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/520041

Exploit#

No public exploit known

History#

Version 12011-11-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.