Red Hat Security AdvisoryRHSA-2012:1132
icedtea-web security update
Released 2012-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) icedtea-web-1.2.1-1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) icedtea-web-1.2.1-1.el6_3, icedtea-web-javadoc-1.2.1-1.el6_3
- Red Hat Enterprise Linux HPC Node (v. 6) icedtea-web-1.2.1-1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) icedtea-web-1.2.1-1.el6_3, icedtea-web-javadoc-1.2.1-1.el6_3
- Red Hat Enterprise Linux Server (v. 6) icedtea-web-1.2.1-1.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) icedtea-web-1.2.1-1.el6_3, icedtea-web-javadoc-1.2.1-1.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) icedtea-web-1.2.1-1.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) icedtea-web-1.2.1-1.el6_3, icedtea-web-javadoc-1.2.1-1.el6_3
Fixes 2 records
Priority MEDIUM 42
The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or e…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06172 · Published 2012-08-07 · Fixed CWE-119
Priority LOW 36
The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) a…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03119 · Published 2012-08-07 · Fixed CWE-119
