Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2013-6493

Disclosure Date: March 03, 2014 (last updated October 05, 2023)
The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.
0
0
Attacker Value
Unknown

CVE-2013-1927

Disclosure Date: April 29, 2013 (last updated October 05, 2023)
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."
0
0
Attacker Value
Unknown

CVE-2013-1926

Disclosure Date: April 29, 2013 (last updated October 05, 2023)
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.
0
0