VDB

GCVE-110-CERTCC-2011-894897

GCVE-110-CERTCC-2011-894897
Advisory PublishedCVSS 7.3/10
Vulnetix · Advisory published January 31, 2011
The Intetc plugin for the NSIS installer fails to validate SSL certificates, which makes affected installers vulnerable to HTTPS spoofing.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.3/10
High · AV:A/AC:M/Au:N/C:C/I:C/A:--
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population4d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.3remediation_levelUreport_confidenceCenvironmental_score7.34213058432target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-0941

Transitive aliases

CNVD-2015-01913GSD-2015-0941GHSA-2phc-7cq6-m4fq

References

NSIS Inetc plug-in fails to validate SSL certificates
advisory
NSIS Inetc plug-in fails to validate SSL certificates
url
NSIS Inetc plug-in fails to validate SSL certificates
url
NSIS Inetc plug-in fails to validate SSL certificates
url
NSIS Inetc plug-in fails to validate SSL certificates
url

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›