CVEvulnerability
CVE-2011-3366
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Affected configurations
• adjam rekonq (<= 0.7.0)
• adjam rekonq 0.0.1
• adjam rekonq 0.0.2
• adjam rekonq 0.0.3
• adjam rekonq 0.0.4
• adjam rekonq 0.1
• adjam rekonq 0.1.0
• adjam rekonq 0.1.95
• adjam rekonq 0.1.98
• adjam rekonq 0.2.0
• adjam rekonq 0.2.90
• adjam rekonq 0.3.0
• adjam rekonq 0.3.90
• adjam rekonq 0.4.0
• adjam rekonq 0.4.90
• adjam rekonq 0.4.95
• adjam rekonq 0.5.0
• adjam rekonq 0.5.80
• adjam rekonq 0.6.0
• adjam rekonq 0.6.1
• adjam rekonq 0.6.80
• adjam rekonq 0.6.85
• adjam rekonq 0.6.95
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.kde.org/info/security/advisory-20111003-1.txt Vendor Advisory
- http://www.securityfocus.com/archive/1/520041 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=743194 Patch
- http://www.kde.org/info/security/advisory-20111003-1.txt Vendor Advisory
- http://www.securityfocus.com/archive/1/520041 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=743194 Patch