Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tor Browser Launcher 安全漏洞
Vulnerability Description
Tor Browser Launcher（又名torbrowser-launcher）是一套用于在Linux中安全地下载、验证、安装和启动Tor浏览器的工具。 Tor Browser Launcher 0.2.4之前的版本中存在安全漏洞。攻击者可通过木马文件利用该漏洞实施中间人攻击，绕过PGP签名验证，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A