Arora-browser

Arora

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-3367

  • EPSS 0.13%
  • Published 29.11.2011 17:55:01
  • Last modified 11.04.2025 00:51:21

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

5

CVE-2010-1100

  • EPSS 0.16%
  • Published 24.03.2010 22:45:16
  • Last modified 11.04.2025 00:51:21

Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.