PT-2011-2572

CVE-2011-0706

·

Publicado

2011-02-18

·

Atualizado

2023-02-13

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions IcedTea-Web versions prior to 1.0.1 OpenJDK Runtime Environment version 1.6.0
Description The issue allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of an inappropriate security descriptor in the JNLPClassLoader class.
Recommendations For IcedTea-Web versions prior to 1.0.1, update to version 1.0.1 or later. For OpenJDK Runtime Environment version 1.6.0, consider upgrading to a newer version that incorporates the fix for this issue.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2011-0706
DSA-2224-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com