Unscored CVE-2011-3367 EUVD-2011-3331GHSA-h65w-m4mc-2qvr

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows r…

Published Nov 29, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

References

20111007 Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM mailing-list