torproject/torbrowser-launcher

torproject/torbrowser-launcher

Releases47
Frequency3 months 1 week
Last Release
Stars862
Securely and easily download, verify, install, and launch Tor Browser in Linux. This repository is a mirror of https://gitlab.torproject.org/tpo/applications/torbrowser-launcher

CVE History

CVEPublishedCVSS v3CVSS v2
6.8 MEDIUM

Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature.