Home

CVE-2011-3365

Description

The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.234

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-3.5.4-26.el5_7.1.i386.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-3.5.4-26.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-apidocs-3.5.4-26.el5_7.1.i386.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-apidocs-3.5.4-26.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-devel-3.5.4-26.el5_7.1.i386.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs-devel-3.5.4-26.el5_7.1.x86_64.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs3-3.5.10-24.el6_1.1.i686.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs3-3.5.10-24.el6_1.1.x86_64.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs3-apidocs-3.5.10-24.el6_1.1.noarch.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs3-devel-3.5.10-24.el6_1.1.i686.rpmLinux
(RHSA-2011:1385) Moderate: kdelibs and kdelibs3 security update kdelibs3-devel-3.5.10-24.el6_1.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234