CVE-2010-2074

The CVE-2010-2074 issue affects istream.c in w3m 0.5.2 (and potentially other versions) where, when ssl_verify_server is enabled, a NULL character ('\0') in a certificate’s domain name (CN or SAN) can allow MITM spoofing of SSL servers via a certificate issued by a trusted CA. This is a domain-na...