CVE-2013-6493

Name of the Vulnerable Software and Affected Versions IcedTea-Web versions prior to 1.4.2

Description The issue affects the LiveConnect implementation, allowing local users to intercept communication between a Java applet and a web browser. This is achieved by pre-creating a temporary socket file with a predictable name in /tmp, enabling the user to read the messages exchanged between the applet and the browser.

Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue.