CVE-2010-2074

CVE-2010-2074 describes a critical vulnerability in w3m 0.5.2 and potentially other versions, where the browser fails to properly handle null characters in X.509 certificate subject fields when SSL server verification is enabled. This flaw allows man-in-the-middle attackers to spoof legitimate SSL servers using specially crafted certificates from trusted Certificate Authorities. The vulnerability carries a CVSS score of 6.8 (medium severity), indicating a network-based attack with medium complexity that could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not a high-profile threat.