High severity8.1NVD Advisory· Published Feb 7, 2017· Updated Jun 17, 2026
CVE-2016-3180
CVE-2016-3180
Description
Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature.
Affected products
3- Range: <0.2.4
<0.2.4+ 1 more
- (no CPE)range: <0.2.4
- cpe:2.3:a:tor_browser_launcher_project:tor_browser_launcher:0.2.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/96140nvdThird Party AdvisoryVDB Entry
- github.com/micahflee/torbrowser-launcher/issues/229nvdVendor Advisory
News mentions
0No linked articles in our index yet.