PT-2014-2123
CVE-2011-2513
·
تاريخ النشر
2011-07-27
·
تاريخ التحديث
2014-06-25
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IcedTea6 versions 1.9.x before 1.9.9
IcedTea6 versions 1.8.x before 1.8.9
IcedTea-Web versions 1.1.x before 1.1.1
IcedTea-Web versions 1.0.x before 1.0.4
Description
The Java Network Launching Protocol (JNLP) implementation allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.
Recommendations
For IcedTea6 versions 1.9.x before 1.9.9, update to version 1.9.9 or later.
For IcedTea6 versions 1.8.x before 1.8.9, update to version 1.8.9 or later.
For IcedTea-Web versions 1.1.x before 1.1.1, update to version 1.1.1 or later.
For IcedTea-Web versions 1.0.x before 1.0.4, update to version 1.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾