CVSS: 9.8EPSS: 1%CPEs: 15EXPL: 0CVE-2011-3377 – IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass
https://notcve.org/view.php?id=CVE-2011-3377
05 Feb 2014 — The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a different sub-domain than the targeted domain. El plug-in de navegador web en IcedTea-Web 1.0.x anterior a 1.0.6 y 1.1.x anterior a 1.1.4, permite a atacantes remotos evadir el Same Origin Policy (SOP) y ejecutar script... • http://dbhole.wordpress.com/2011/11/08/icedtea-web-1-0-6-and-1-1-4-security-releases-released • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 25EXPL: 0CVE-2013-1926 – icedtea-web: class loader sharing for applets with same codebase paths
https://notcve.org/view.php?id=CVE-2013-1926
29 Apr 2013 — The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet. El plugin IcedTea-Web antes de v1.2.3 y v1.3.x antes v1.3.2 utiliza el mismo cargador de clases de applets con la misma ruta de código base pero desde diferentes ámbitos, lo que permite a atacantes remotos obtener información sensible o posib... • http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS •
CVSS: 8.8EPSS: 2%CPEs: 25EXPL: 0CVE-2013-1927 – icedtea-web: GIFAR issue
https://notcve.org/view.php?id=CVE-2013-1927
29 Apr 2013 — The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR." El plugin IcedTea-Web antes de v1.2.3 y v1.3.x antes de v1.3.2 permite a atacantes remotos ejecutar código de su elección a través de un archivo creado para tal fin que valida tanto como archivo GIF y archivo JAR de Java, también conocido como archivo "GIFAR." • http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS •
CVSS: 9.8EPSS: 1%CPEs: 12EXPL: 0CVE-2012-4540 – icedtea-web: IcedTeaScriptableJavaObject:: invoke off-by-one heap-based buffer overflow
https://notcve.org/view.php?id=CVE-2012-4540
11 Nov 2012 — Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, ... • http://icedtea.classpath.org/hg/release/icedtea-web-1.1/file/d759ec560073/NEWS • CWE-122: Heap-based Buffer Overflow CWE-189: Numeric Errors •
CVSS: 8.1EPSS: 0%CPEs: 3EXPL: 0CVE-2012-3422 – icedtea-web: getvalueforurl uninitialized instance pointer
https://notcve.org/view.php?id=CVE-2012-3422
07 Aug 2012 — The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read. La función getFirstInTableInstance en el complemento IcedTea-Web anteior a v1.2.1 devuelve un puntero no inicializado cuando el hash instance_to_id_map está vacío, lo que perm... • http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.1EPSS: 2%CPEs: 3EXPL: 2CVE-2012-3423 – icedtea-web: incorrect handling of not 0-terminated strings
https://notcve.org/view.php?id=CVE-2012-3423
07 Aug 2012 — The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet. El complemento IcedTea-Web anterior a v1.2.1 no maneja adecuadamente los (NPVariant) (NPStrings) sin terminadores NUL, lo que permite a atacantes remotos causar una denegación de servicio (caída), obtener información sensible de la memoria, o ... • http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2011-0706 – Gentoo Linux Security Advisory 201406-32
https://notcve.org/view.php?id=CVE-2011-0706
18 Feb 2011 — The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor." La clase JNLPClassLoader en IcedTea-Web anterior a versión 1.0.1, tal y como es usado en OpenJDK Runtime Environment versión 1.6.0, permite a los atacantes remotos alcanzar privilegios por medio de vectores desconocidos relacionados con varios firmantes y la... • http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 2%CPEs: 18EXPL: 0CVE-2011-0025 – Gentoo Linux Security Advisory 201406-32
https://notcve.org/view.php?id=CVE-2011-0025
04 Feb 2011 — IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source. IcedTea v1.7 anterior a v1.7.8, v1.8 anterior a v1.8.5 y v1.9 anterior a v1.9.5 no verifica adecuadamente las firmas de los archivos JAR que (1) están "parcialmente firmados" o (2), firmado por varias entidades, lo que p... • http://blog.fuseyism.com/index.php/2011/02/01/security-icedtea6-178-185-195-released • CWE-20: Improper Input Validation •
CVSS: 9.1EPSS: 1%CPEs: 16EXPL: 0CVE-2010-4351 – Red Hat OpenJDK IcedTea6 ClassLoader Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2010-4351
18 Jan 2011 — The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader. El JNLP SecurityManager en IcedTea (IcedTea.so) v1.7 anteriores a v1.7.7, v1.8 anteriores a v1.8.4 y v1.9 anteriores a v1.9.4 de Java OpenJDK devuelve desde el método ... • http://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released • CWE-264: Permissions, Privileges, and Access Controls CWE-305: Authentication Bypass by Primary Weakness •
CVSS: 7.5EPSS: 1%CPEs: 10EXPL: 0CVE-2010-3860 – IcedTea System property information leak via public static
https://notcve.org/view.php?id=CVE-2010-3860
08 Dec 2010 — IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories. IcedTea anterior v1.9.2, como el basado en OpenJDK v6, declara múltiples variables sensibles como públicas, lo que permite a atacantes remotos obtener información ... • http://blog.fuseyism.com/index.php/2010/11/24/icedtea6-176-183-and-192-released • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •