CVE-2011-3367

CVE-2011-3367 concerns Arora (possibly 0.11 and related builds), where rendering certificate fields in a security dialog does not use a specific font, allowing a remote attacker to spoof the certificate’s CN via rich text. Multiple connected advisories confirm Arora is the affected component and ...

CVE-2010-1100

The CVE-2010-1100 entry concerns the web browser Arora. The issue is an integer overflow in Arora that lets remote attackers bypass intended port restrictions for outbound TCP connections, demonstrated with a port value of 65561 on port 25. The available sources corroborate the vulnerability in A...