IC
Product
Icedtea-web
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Icedtea-web to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-2514 | – | May 14 | The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote… Affected: through 1.0.3; 1.0; 1.0.1; 1.0.2; 1.1 |
| CVE-2011-2513 | – | May 14 | The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote… Affected: through 1.0.3; 1.0; 1.0.1; 1.0.2; 1.1 |
| CVE-2013-6493 | – | Mar 3 | The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser… Affected: through 1.3.2; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +14 more |
| CVE-2011-3377 | – | Feb 5 | The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +4 more |
| CVE-2013-1927 | – | Apr 29 | The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file,… Affected: through 1.2.2; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +14 more |
| CVE-2013-1926 | – | Apr 29 | The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote… Affected: through 1.2.2; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +14 more |
| CVE-2012-4540 | – | Nov 11 | Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1… Affected: 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.5; +4 more |
| CVE-2012-3423 | – | Aug 7 | The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash),… Affected: through 1.2; 1.0; 1.1 |
| CVE-2012-3422 | – | Aug 7 | The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote… Affected: through 1.2; 1.0; 1.1 |
| CVE-2011-0706 | – | Feb 18 | The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to… Affected: 1.0; 1.0; 1.0.1 |
Showing 10