CVE-2011-3366 Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
MediumCVSS 4.3
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adjam rekonq | <= 0.7.0 | No fix listed |
| adjam rekonq | = 0.0.1 | No fix listed |
| adjam rekonq | = 0.0.2 | No fix listed |
| adjam rekonq | = 0.0.3 | No fix listed |
| adjam rekonq | = 0.0.4 | No fix listed |
| adjam rekonq | = 0.1-alpha | No fix listed |
| adjam rekonq | = 0.1.0 | No fix listed |
| adjam rekonq | = 0.1.95 | No fix listed |
| adjam rekonq | = 0.1.98 | No fix listed |
| adjam rekonq | = 0.2.0 | No fix listed |
| adjam rekonq | = 0.2.90 | No fix listed |
| adjam rekonq | = 0.3.0 | No fix listed |
| adjam rekonq | = 0.3.90 | No fix listed |
| adjam rekonq | = 0.4.0 | No fix listed |
| adjam rekonq | = 0.4.90 | No fix listed |
| adjam rekonq | = 0.4.95 | No fix listed |
| adjam rekonq | = 0.5.0 | No fix listed |
| adjam rekonq | = 0.5.80 | No fix listed |
| adjam rekonq | = 0.6.0 | No fix listed |
| adjam rekonq | = 0.6.1 | No fix listed |
| adjam rekonq | = 0.6.80 | No fix listed |
| adjam rekonq | = 0.6.85 | No fix listed |
| adjam rekonq | = 0.6.95 | No fix listed |
References
- www.kde.org vendor-advisory
- 20111007 Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM mailing-list
- bugzilla.redhat.com patch