5
CVSSv2

CVE-2011-3367

Published: 29/11/2011 Updated: 30/11/2011
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote malicious users to spoof the common name (CN) of a certificate via rich text.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

arora-browser arora 0.11.0