The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Feb 18, 2011 |
| Suse | — | Upgrade java-1_6_0-openjdk-demoUpgrade java-1_6_0-openjdk-pluginUpgrade java-1_6_0-openjdkUpgrade java-1_6_0-openjdk-srcUpgrade java-1_6_0-openjdk-javadocUpgrade java-1_6_0-openjdk-devel | Dec 12, 2013 | Feb 18, 2011 |
| Ubuntu | — | Upgrade openjdk-6-jreUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-jre-libUpgrade icedtea6-plugin | Nov 8, 2024 | Feb 19, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub