CVE-2012-3423

概要

参考情報

• icedtea.classpath.org/bugzilla/show_bug.cgi
• icedtea.classpath.org/bugzilla/show_bug.cgi · Vendor Advisory
• icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS
• icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d65bd94e0ba9 · Exploit
• icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d7375e2a9076 · Exploit
• lists.opensuse.org/opensuse-security-announce/2012-08/msg00003.html
• lists.opensuse.org/opensuse-security-announce/2012-08/msg00004.html
• lists.opensuse.org/opensuse-security-announce/2012-08/msg00005.html
• lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html
• lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html
• lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

icedtea-web のその他の脆弱性

• CVE-2011-2514中 6.8The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.…
• CVE-2011-2513中 5.0The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.…
• CVE-2013-6493低 2.1The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages be…
• CVE-2011-3377中 4.3The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy (S…
• CVE-2013-1927中 6.8The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validat…