FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-3366

This CVE name corresponds to:

Entered	Topic
2011-10-23	kdelibs4, rekonq -- input validation failure

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2011-3366 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2011-3366
Phase	Assigned(20110830)

Description

Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

References

Source	Reference
BUGTRAQ	20111007 Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM
CONFIRM	http://www.kde.org/info/security/advisory-20111003-1.txt
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=743194