CVE-2011-3366

Rekonq < 0.7.0 - Certificate Common Name Spoofing via Rich Text Rendering

Title source: llm
STIX 2.1

Description

Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www.kde.org/info/security/advisory-20111003-1.txt
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520041

Scores

EPSS 0.0074
EPSS Percentile 50.3%

Details

CWE
CWE-20
Status published
Products (23)
adjam/rekonq 0.0.1
adjam/rekonq 0.0.2
adjam/rekonq 0.0.3
adjam/rekonq 0.0.4
adjam/rekonq 0.1 alpha
adjam/rekonq 0.1.0
adjam/rekonq 0.1.95
adjam/rekonq 0.1.98
adjam/rekonq 0.2.0
adjam/rekonq 0.2.90
... and 13 more
Published Nov 29, 2011
Tracked Since Feb 18, 2026