CVE-2012-4540

Name of the Vulnerable Software and Affected Versions IcedTea-Web versions 1.1.x through 1.1.6 IcedTea-Web versions 1.2.x through 1.2.1 IcedTea-Web versions 1.3.x through 1.3.0 IcedTea-Web versions 1.4.x through 1.4.0

Description The issue is related to an off-by-one error in the invoke function, which can be triggered by a crafted webpage. This can lead to a heap-based buffer overflow, allowing remote attackers to obtain sensitive information, cause a denial of service, or possibly execute arbitrary code.

Recommendations For versions 1.1.x, update to version 1.1.7 or later. For versions 1.2.x, update to version 1.2.2 or later. For versions 1.3.x, update to version 1.3.1 or later. For versions 1.4.x, update to version 1.4.1 or later.