TI-2016-02668 CVE-2016-3180 · GHSA-f2pj-7h7q-56r5Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run…Priority LOW 39Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and…CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.01923 · Published 2017-02-07 · No fix listed CWE-254
