Vulnerability in Redhat Icedtea6
CVE-2011-2514
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by…
EPSS: 0.024 (82.2th percentile) — read the EPSS interpretation.
Affected products
- Redhat Icedtea6 — versions 1.8, 1.8.1, 1.8.2
- Redhat Icedtea-web — versions 1.0, 1.0.1, 1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Patch)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)