CVE-2016-3180

CVE-2016-3180 describes a critical man-in-the-middle vulnerability in Tor Browser Launcher versions prior to 0.2.4, affecting the tor_browser_launcher_project. This flaw allows attackers to bypass PGP signature verification during the initial run, leading to arbitrary code execution via a malicious tar file and a crafted signature. With a CVSS score of 8.1 (High), exploitation requires high attack complexity but can result in complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.