Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat icedtea-web 1.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-3422
The getFirstInTableInstance function in the IcedTea-Web plugin prior to 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web...
Redhat Icedtea-webRedhat Icedtea-web 1.1Redhat Icedtea-web 1.0
NA
CVE-2012-3423
The IcedTea-Web plugin prior to 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote malicious users to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.
Redhat Icedtea-webRedhat Icedtea-web 1.1Redhat Icedtea-web 1.0
NA
CVE-2012-4540
Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x prior to 1.1.7, 1.2.x prior to 1.2.2, 1.3.x prior to 1.3.1, and 1.4.x prior to 1.4.1 allows remote malicious users to obtain sensitive information, cause a denial of service (crash), ...
Opensuse Opensuse 13.2Opensuse Opensuse 13.1Redhat Icedtea-web 1.1.2Redhat Icedtea-web 1.1.1Redhat Icedtea-web 1.1.6Redhat Icedtea-web 1.1.5Redhat Icedtea-web 1.2.1Redhat Icedtea-web 1.1Redhat Icedtea-web 1.2Redhat Icedtea-web 1.3Redhat Icedtea-web 1.1.4Redhat Icedtea-web 1.1.3
NA
CVE-2011-3377
The web browser plug-in in IcedTea-Web 1.0.x prior to 1.0.6 and 1.1.x prior to 1.1.4 allows remote malicious users to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same seco...
Redhat Icedtea-web 1.1Redhat Icedtea-web 1.1.1Redhat Icedtea-web 1.1.2Redhat Icedtea-web 1.1.3Redhat Icedtea-web 1.0Redhat Icedtea-web 1.0.5Redhat Icedtea-web 1.0.2Redhat Icedtea-web 1.0.4Redhat Icedtea-web 1.0.1Redhat Icedtea-web 1.0.3Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Opensuse Opensuse 12.1Canonical Ubuntu Linux 11.10
NA
CVE-2011-2513
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x prior to 1.9.9 and prior to 1.8.9, and IcedTea-Web 1.1.x prior to 1.1.1 and prior to 1.0.4, allows remote malicious users to obtain the username and full path of the home and cache directories by accessin...
Redhat Icedtea-web 1.1Redhat Icedtea-webRedhat Icedtea-web 1.0.2Redhat Icedtea-web 1.0.1Redhat Icedtea-web 1.0Redhat Icedtea6 1.8.5Redhat Icedtea6 1.8.4Redhat Icedtea6 1.8.3Redhat Icedtea6 1.8.2Redhat Icedtea6 1.9.4Redhat Icedtea6 1.9.5Redhat Icedtea6 1.9.6Redhat Icedtea6 1.9.7Redhat Icedtea6 1.9.1Redhat Icedtea6 1.9.3Redhat Icedtea6 1.9.8Redhat Icedtea6 1.8.7Redhat Icedtea6 1.8Redhat Icedtea6 1.9.2Redhat Icedtea6Redhat Icedtea6 1.8.6Redhat Icedtea6 1.8.1
NA
CVE-2011-2514
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x prior to 1.9.9 and prior to 1.8.9, and IcedTea-Web 1.1.x prior to 1.1.1 and prior to 1.0.4, allows remote malicious users to trick victims into granting access to local files by modifying the content of t...
Redhat Icedtea-webRedhat Icedtea-web 1.0.2Redhat Icedtea-web 1.0.1Redhat Icedtea-web 1.0Redhat Icedtea-web 1.1Redhat Icedtea6 1.9.5Redhat Icedtea6 1.9.6Redhat Icedtea6 1.9.7Redhat Icedtea6 1.9.8Redhat Icedtea6 1.8.4Redhat Icedtea6 1.8.3Redhat Icedtea6 1.8.2Redhat Icedtea6 1.8.1Redhat Icedtea6 1.9.2Redhat Icedtea6 1.9.4Redhat Icedtea6Redhat Icedtea6 1.8.6Redhat Icedtea6 1.9.1Redhat Icedtea6 1.9.3Redhat Icedtea6 1.8.7Redhat Icedtea6 1.8.5Redhat Icedtea6 1.8
NA
CVE-2011-3389
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle malicious users...
Opera Opera Browser -Microsoft Internet Explorer -Microsoft Windows -Google Chrome -Mozilla Firefox -Siemens Simatic Rf68xr FirmwareSiemens Simatic Rf615r FirmwareHaxx CurlRedhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 6.2Debian Debian Linux 5.0Debian Debian Linux 6.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 10.04
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook