CVE-2010-3312: Medium severity gnome epiphany vulnerability
Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3312?
CVE-2010-3312 is classified as a medium severity vulnerability due to its potential for man-in-the-middle attacks.
How does CVE-2010-3312 exploit occur?
The exploit occurs when the affected versions of Epiphany unconditionally display a closed-lock icon for any HTTPS URL, misleading users into believing the connection is secure.
Which versions of Epiphany are affected by CVE-2010-3312?
CVE-2010-3312 affects Epiphany versions 2.28 and 2.29.
How do I fix CVE-2010-3312?
To fix CVE-2010-3312, update to a version of Epiphany that is not vulnerable, such as newer releases beyond 2.29.
What are the implications of CVE-2010-3312 for users?
Users may unknowingly interact with spoofed HTTPS websites, exposing them to potential security risks.