Lucene search
RedhatCVE-2011-3366HistoryNov 29, 2011 - 5:55 p.m.
CVE-2011-3366
2011-11-2917:55:01
CWE-20
redhat
web.nvd.nist.gov
43
cve-2011-3366
rekonq
font vulnerability
remote attackers
certificate spoofing
security dialog
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
9.1
Confidence
High
EPSS
0.003
Percentile
71.2%
Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Affected configurations
Node
adjamrekonqRange≤0.7.0
ORadjamrekonqMatch0.0.1
ORadjamrekonqMatch0.0.2
ORadjamrekonqMatch0.0.3
ORadjamrekonqMatch0.0.4
ORadjamrekonqMatch0.1alpha
ORadjamrekonqMatch0.1.0
ORadjamrekonqMatch0.1.95
ORadjamrekonqMatch0.1.98
ORadjamrekonqMatch0.2.0
ORadjamrekonqMatch0.2.90
ORadjamrekonqMatch0.3.0
ORadjamrekonqMatch0.3.90
ORadjamrekonqMatch0.4.0
ORadjamrekonqMatch0.4.90
ORadjamrekonqMatch0.4.95
ORadjamrekonqMatch0.5.0
ORadjamrekonqMatch0.5.80
ORadjamrekonqMatch0.6.0
ORadjamrekonqMatch0.6.1
ORadjamrekonqMatch0.6.80
ORadjamrekonqMatch0.6.85
ORadjamrekonqMatch0.6.95
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adjam | rekonq | * | cpe:2.3:a:adjam:rekonq:*:*:*:*:*:*:*:* |
| adjam | rekonq | 0.0.1 | cpe:2.3:a:adjam:rekonq:0.0.1:*:*:*:*:*:*:* |
| adjam | rekonq | 0.0.2 | cpe:2.3:a:adjam:rekonq:0.0.2:*:*:*:*:*:*:* |
| adjam | rekonq | 0.0.3 | cpe:2.3:a:adjam:rekonq:0.0.3:*:*:*:*:*:*:* |
| adjam | rekonq | 0.0.4 | cpe:2.3:a:adjam:rekonq:0.0.4:*:*:*:*:*:*:* |
| adjam | rekonq | 0.1 | cpe:2.3:a:adjam:rekonq:0.1:alpha:*:*:*:*:*:* |
| adjam | rekonq | 0.1.0 | cpe:2.3:a:adjam:rekonq:0.1.0:*:*:*:*:*:*:* |
| adjam | rekonq | 0.1.95 | cpe:2.3:a:adjam:rekonq:0.1.95:*:*:*:*:*:*:* |
| adjam | rekonq | 0.1.98 | cpe:2.3:a:adjam:rekonq:0.1.98:*:*:*:*:*:*:* |
| adjam | rekonq | 0.2.0 | cpe:2.3:a:adjam:rekonq:0.2.0:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2011-3366
2011-11-29 00:00:00
cvelist
cvelist
CVE-2011-3366
2011-11-29 17:00:00
nvd
nvd
CVE-2011-3366
2011-11-29 17:55:01
prion
prion
Design/Logic Flaw
2011-11-29 17:55:00
openvas
openvas
FreeBSD Ports: kdelibs
2012-02-13 00:00:00
FreeBSD Ports: kdelibs
2012-02-13 00:00:00
Gentoo Security Advisory GLSA 201412-09
2015-09-29 00:00:00
nessus
nessus
freebsd
freebsd
kdelibs4, rekonq -- input validation failure
2011-10-03 00:00:00
securityvulns
securityvulns
UI spoofing in different QT applications
2011-10-10 00:00:00
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
9.1
Confidence
High
EPSS
0.003
Percentile
71.2%
Related for CVE-2011-3366