PT-2014-2124
CVE-2011-2514
·
تاريخ النشر
2011-07-27
·
تاريخ التحديث
2014-06-25
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IcedTea6 versions 1.9.x through 1.9.8
IcedTea6 versions 1.8.x through 1.8.8
IcedTea-Web versions 1.1.x through 1.1.0
IcedTea-Web versions 1.0.x through 1.0.3
Description
The issue allows remote attackers to deceive victims into granting access to local files. This is achieved by modifying the content of the Java Web Start Security Warning dialog box, making it represent a different filename than the file for which access will be granted.
Recommendations
For IcedTea6 versions 1.9.x through 1.9.8, update to version 1.9.9 or later.
For IcedTea6 versions 1.8.x through 1.8.8, update to version 1.8.9 or later.
For IcedTea-Web versions 1.1.x through 1.1.0, update to version 1.1.1 or later.
For IcedTea-Web versions 1.0.x through 1.0.3, update to version 1.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾