Vendor archive

arora-browser CVEs

Beta · best-effort

2 CVEs tagged to vendor arora-browser — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2011-3367

Published Nov 29, 2011

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-1100

Published Mar 24, 2010

Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data t…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1