Icedtea-web (Redhat) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2014-05-14. Vendor: Redhat.
CVEs of Icedtea-web
- CVE-2011-2514 - CVSS 6.8 (medium), 2014-05-14: The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before…
- CVE-2011-2513 - CVSS 5 (medium), 2014-05-14: The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before…
- CVE-2013-6493 - CVSS 2.1 (low), 2014-03-03: The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java…
- CVE-2011-3377 - CVSS 4.3 (medium), 2014-02-05: The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute…
- CVE-2013-1926 - CVSS 5.8 (medium), 2013-04-29: The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains,…
- CVE-2013-1927 - CVSS 6.8 (medium), 2013-04-29: The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF…
- CVE-2012-4540 - CVSS 6.8 (medium), 2012-11-11: Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and…
- CVE-2012-3422 - CVSS 6.8 (medium), 2012-08-07: The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which…
- CVE-2012-3423 - CVSS 7.5 (high), 2012-08-07: The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of…
- CVE-2011-0706 - CVSS 7.5 (high), 2011-02-19: The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown…
