icedtea-web project icedtea-web 1.8.2 vulnerabilities and exploits

(subscribe to this query)

It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, ...

Icedtea-web Project Icedtea-web Icedtea-web Project Icedtea-web 1.8.2 Debian Debian Linux 8.0 Opensuse Leap 15.0

1 Github repository

It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.

Icedtea-web Project Icedtea-web Icedtea-web Project Icedtea-web 1.8.2 Debian Debian Linux 8.0 Opensuse Leap 15.0

1 Github repository

It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the c...

Icedtea-web Project Icedtea-web Icedtea-web Project Icedtea-web 1.8.2 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Aus 7.6

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook