The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Feb 18, 2011 |
| Suse | — | Upgrade java-1_6_0-openjdk-demoUpgrade java-1_6_0-openjdkUpgrade java-1_6_0-openjdk-pluginUpgrade java-1_6_0-openjdk-develUpgrade java-1_6_0-openjdk-srcUpgrade java-1_6_0-openjdk-javadoc | Dec 12, 2013 | Feb 18, 2011 |
| Ubuntu | — | Upgrade icedtea6-pluginUpgrade openjdk-6-jre-libUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headless | Nov 8, 2024 | Feb 19, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub