[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2011:1441-01 -- Redhat icedtea-web

ID: oval:org.secpod.oval:def:500145Date: (C)2012-01-31   (M)2022-12-07
Class: PATCHFamily: unix




The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. A flaw was found in the same-origin policy implementation in the IcedTea-Web browser plug-in. A malicious Java applet could use this flaw to open network connections to hosts other than the originating host, violating the same-origin policy. All IcedTea-Web users should upgrade to these updated packages, which upgrade IcedTea-Web to version 1.0.6 to correct this issue. Web browsers using the IcedTea-Web browser plug-in must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 6
Product:
icedtea-web
Reference:
RHSA-2011:1441-01
CVE-2011-3377
CVE    1
CVE-2011-3377
CPE    12
cpe:/o:redhat:enterprise_linux:6
cpe:/a:redhat:icedtea-web
cpe:/a:redhat:icedtea-web:1.1
cpe:/a:redhat:icedtea-web:1.0
...

© SecPod Technologies