arora: certificate spoof
| Package(s): | arora | CVE #(s): | CVE-2011-3367 | ||||||||||||||||
| Created: | December 13, 2011 | Updated: | August 20, 2012 | ||||||||||||||||
| Description: | From the CVE entry:
Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||