Red Hat IcedTea-Web 1.2.2

CPE Details

Red Hat IcedTea-Web 1.2.2
redhat
icedtea-web
1.2.2
2013-04-30
12h21 +00:00
2013-05-08
12h48 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:icedtea-web:1.2.2:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

icedtea-web

Version

1.2.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-6493 2014-03-03 15h00 +00:00 The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.
2.1
CVE-2013-1926 2013-04-29 20h00 +00:00 The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.
5.8
CVE-2013-1927 2013-04-29 20h00 +00:00 The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
6.8