CVE-2011-3365
29.11.2011, 17:55
The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| kde | kde_sc | 4.6.0 |
| kde | kde_sc | 4.6.1 |
| kde | kde_sc | 4.6.2 |
| kde | kde_sc | 4.6.3 |
| kde | kde_sc | 4.6.4 |
| kde | kde_sc | 4.6.5 |
| kde | kde_sc | 4.7.0 |
| kde | kde_sc | 4.7.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| kdelibs |
| ||
| kdelibs-apidocs |
| ||
| kdelibs-common |
| ||
| kdelibs-devel |
| ||
| kdelibs3 |
| ||
| kdelibs3-apidocs |
| ||
| kdelibs3-devel |
|
Common Weakness Enumeration
References