Red Hat Security AdvisoryRHSA-2013:0753
icedtea-web security update
Released 2013-04-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) icedtea-web-1.2.3-2.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) icedtea-web-1.2.3-2.el6_4, icedtea-web-javadoc-1.2.3-2.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) icedtea-web-1.2.3-2.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) icedtea-web-1.2.3-2.el6_4, icedtea-web-javadoc-1.2.3-2.el6_4
- Red Hat Enterprise Linux Server (v. 6) icedtea-web-1.2.3-2.el6_4
- Red Hat Enterprise Linux Server Optional (v. 6) icedtea-web-1.2.3-2.el6_4, icedtea-web-javadoc-1.2.3-2.el6_4
- Red Hat Enterprise Linux Workstation (v. 6) icedtea-web-1.2.3-2.el6_4
- Red Hat Enterprise Linux Workstation Optional (v. 6) icedtea-web-1.2.3-2.el6_4, icedtea-web-javadoc-1.2.3-2.el6_4
Fixes 2 records
Priority LOW 37
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04323 · Published 2013-04-29 · Fixed
Priority LOW 30
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or p…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01865 · Published 2013-04-29 · Fixed
