CVE-2011-3367: Arora-Browser Arora

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

Affected products

• Arora-Browser Arora: version 0.11.0 only

Published 2011-11-29. Last modified 2026-06-16.