Vulnerabilities > CVE-2016-3180 - 7PK - Security Features vulnerability in TOR Browser Launcher Project TOR Browser Launcher 0.2.3
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |