Red Hat Security AdvisoryRHSA-2012:1434
icedtea-web security update
Released 2012-11-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) icedtea-web-1.2.2-1.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) icedtea-web-1.2.2-1.el6_3, icedtea-web-javadoc-1.2.2-1.el6_3
- Red Hat Enterprise Linux HPC Node (v. 6) icedtea-web-1.2.2-1.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) icedtea-web-1.2.2-1.el6_3, icedtea-web-javadoc-1.2.2-1.el6_3
- Red Hat Enterprise Linux Server (v. 6) icedtea-web-1.2.2-1.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) icedtea-web-1.2.2-1.el6_3, icedtea-web-javadoc-1.2.2-1.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) icedtea-web-1.2.2-1.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) icedtea-web-1.2.2-1.el6_3, icedtea-web-javadoc-1.2.2-1.el6_3
Fixes 1 record
Priority LOW 36
Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive in…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0344 · Published 2012-11-11 · Fixed CWE-189
