NVD

Id
14717  
Name
CVE-2010-3312  
Description
Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-10-14  
Modified Date
2011-02-17  
Seq
2010-3312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81547 14717 CVE-2010-3312 http://blog.fefe.de/?ts=b26ca29d  View
81548 14717 CVE-2010-3312 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564690  View
81549 14717 CVE-2010-3312 http://bugzilla-attachments.gnome.org/attachment.cgi?id=154330  View
81550 14717 CVE-2010-3312 SUSE-SR:2010:023  View
81551 14717 CVE-2010-3312 SUSE-SR:2011:002  View
81552 14717 CVE-2010-3312 [oss-security] 20100917 Re: CVE request: epiphany not checking ssl certs  View
81553 14717 CVE-2010-3312 [oss-security] 20100917 Re: CVE request: epiphany not checking ssl certs  View
81554 14717 CVE-2010-3312 [oss-security] 20100917 Re: CVE request: epiphany not checking ssl certs  View
81555 14717 CVE-2010-3312 [oss-security] 20100917 CVE request: epiphany not checking ssl certs  View
81556 14717 CVE-2010-3312 [oss-security] 20100917 Re: CVE request: epiphany not checking ssl certs  View
81557 14717 CVE-2010-3312 [oss-security] 20100920 Re: CVE request: epiphany not checking ssl certs  View
81558 14717 CVE-2010-3312 [oss-security] 20100921 Re: CVE request: epiphany not checking ssl certs  View
81559 14717 CVE-2010-3312 ADV-2011-0212  View
81560 14717 CVE-2010-3312 https://bugzilla.gnome.org/show_bug.cgi?id=600663  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41701 JVNDB-2009-002708 Epiphany における任意の https Web サイトを偽装される脆弱性 Epiphany は、WebKit および LibSoup が使用される際、https: のサブストリングで始まる全ての URL に対して、ユーザへの警告無しに closed-lock アイコンを無条件に表示するため、任意の https Web サイトを偽装される脆弱性が存在します。 CVE-2010-3312 45892 CVE-2010-3312 14717 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002708.html 2009-11-04 2012-03-27 View