CVE-2011-3365

Name	CVE-2011-3365
Description	The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
kde4libs (PTS)	buster	4:4.14.38-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
kde4libs	source	lenny	(not affected)
kde4libs	source	squeeze	(not affected)
kde4libs	source	(unstable)	4:4.7.2-1

[squeeze] - kde4libs <not-affected> (only 4.6.0 - 4.7.1 are vulnerable)
[lenny] - kde4libs <not-affected> (only 4.6.0 - 4.7.1 are vulnerable)