Approved changes feed: RSS · Atom

cpe:2.3:a:arora-browser:arora:0.11.0:*:*:*:*:*:*:*

part: a version: 0.11.0 update: *

VendorArora Browser (71735480-5915-56c0-8883-6b2a4e86fa93)
ProductArora (02be39d9-2ae5-539b-9248-ebb36c81187e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/ubuntu/arora purl2cpe 2026-06-01 10:15:20.807429
pkg:github/arora/arora purl2cpe 2026-06-01 10:15:20.807432
pkg:rpm/fedora/arora purl2cpe 2026-06-01 10:15:20.807433
pkg:rpm/opensuse/arora purl2cpe 2026-06-01 10:15:20.807435

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3367 vulnerable 2026-06-08 04:59:24.937515 Details available
Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Published: 2011-11-29T17:00:00.000Z
Updated: 2024-08-06T23:29:56.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.