[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2012:1132-01 -- Redhat icedtea-web

ID: oval:org.secpod.oval:def:500859Date: (C)2012-08-25   (M)2023-07-28
Class: PATCHFamily: unix




The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. An uninitialized pointer use flaw was found in the IcedTea-Web plug-in. Visiting a malicious web page could possibly cause a web browser using the IcedTea-Web plug-in to crash, disclose a portion of its memory, or execute arbitrary code. It was discovered that the IcedTea-Web plug-in incorrectly assumed all strings received from the browser were NUL terminated. When using the plug-in with a web browser that does not NUL terminate strings, visiting a web page containing a Java applet could possibly cause the browser to crash, disclose a portion of its memory, or execute arbitrary code. Red Hat would like to thank Chamal De Silva for reporting the CVE-2012-3422 issue. This erratum also upgrades IcedTea-Web to version 1.2.1. Refer to the NEWS file, linked to in the References, for further information. All IcedTea-Web users should upgrade to these updated packages, which resolve these issues. Web browsers using the IcedTea-Web browser plug-in must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 6
Product:
icedtea-web
Reference:
RHSA-2012:1132-01
CVE-2012-3422
CVE-2012-3423
CVE    2
CVE-2012-3423
CVE-2012-3422
CPE    5
cpe:/o:redhat:enterprise_linux:6
cpe:/a:redhat:icedtea-web:1.1
cpe:/a:redhat:icedtea-web:1.2
cpe:/a:redhat:icedtea-web:1.0
...

© SecPod Technologies