Red Hat Security Advisory

RHSA-2011:1441

icedtea-web security update

Released 2011-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) icedtea-web-1.0.6-1.el6_1
Red Hat Enterprise Linux Server Optional (v. 6) icedtea-web-1.0.6-1.el6_1, icedtea-web-javadoc-1.0.6-1.el6_1

Fixes 1 record

TI-2011-02987 CVE-2011-3377 · GHSA-cqp6-h2hr-w9xj

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows…

LOW 24

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02217 Published 2014-02-05 Fixed CWE-264