CVE-2011-2514

Published: May 14, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.

Affected (22)

Products: Redhat: Icedtea Web, Icedtea6

Redhat

2 products

Icedtea Web

Icedtea6

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Icedtea Web	Up to 1.0.3
Redhat Icedtea Web	Version 1.0.1
Redhat Icedtea Web	Version 1.0.2
Redhat Icedtea Web	Version 1.0
Redhat Icedtea Web	Version 1.1

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Redhat Icedtea6	Up to 1.8.8
Redhat Icedtea6	Version 1.8.1
Redhat Icedtea6	Version 1.8.2
Redhat Icedtea6	Version 1.8.3
Redhat Icedtea6	Version 1.8.4
Redhat Icedtea6	Version 1.8.5
Redhat Icedtea6	Version 1.8.6
Redhat Icedtea6	Version 1.8.7
Redhat Icedtea6	Version 1.8
Redhat Icedtea6	Version 1.9.1
Redhat Icedtea6	Version 1.9.2
Redhat Icedtea6	Version 1.9.3
Redhat Icedtea6	Version 1.9.4
Redhat Icedtea6	Version 1.9.5
Redhat Icedtea6	Version 1.9.6
Redhat Icedtea6	Version 1.9.7
Redhat Icedtea6	Version 1.9.8