CVE-2011-0706

Published: Feb 19, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

Affected (4)

Products: Redhat: Icedtea Web · Sun: Jdk

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Icedtea Web	Version 1.0.1 pre
Redhat Icedtea Web	Version 1.0
Redhat Icedtea Web	Version 1.0 pre
Sun Jdk	Version 1.6.0

Related CWEs

References (22)

http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html

Source: secalert@redhat.com

http://secunia.com/advisories/43350

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2224

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:054

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46439

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=677332

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65534

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117

Source: secalert@redhat.com

http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43350

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201406-32.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2224

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:054

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46439

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=677332

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/65534

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.