CVE-2011-3367 Information

Description

Arora possibly 0.11 and other versions does not use a certain font when rendering certificate fields in a security dialog which allows remote attackers to spoof the common name (CN) of a certificate via rich text.

Reference

http://www.securityfocus.com/archive/1/520041