CVE-2013-1926

Published: Apr 29, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

Affected (25)

Products: Redhat: Icedtea Web · Canonical: Ubuntu Linux · Opensuse: Opensuse

1 product

1 product

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Redhat Icedtea Web	Up to 1.2.2
Redhat Icedtea Web	Version 1.0.1
Redhat Icedtea Web	Version 1.0.2
Redhat Icedtea Web	Version 1.0.3
Redhat Icedtea Web	Version 1.0.4
Redhat Icedtea Web	Version 1.0.5
Redhat Icedtea Web	Version 1.0.6
Redhat Icedtea Web	Version 1.0
Redhat Icedtea Web	Version 1.1.1
Redhat Icedtea Web	Version 1.1.2
Redhat Icedtea Web	Version 1.1.3
Redhat Icedtea Web	Version 1.1.4
Redhat Icedtea Web	Version 1.1.5
Redhat Icedtea Web	Version 1.1.6
Redhat Icedtea Web	Version 1.1.7
Redhat Icedtea Web	Version 1.1
Redhat Icedtea Web	Version 1.2.1
Redhat Icedtea Web	Version 1.2
Redhat Icedtea Web	Version 1.3.1
Redhat Icedtea Web	Version 1.3

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.2

References (44)

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

Source: secalert@redhat.com

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Source: secalert@redhat.com

http://osvdb.org/92543

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0753.html

Source: secalert@redhat.com

http://secunia.com/advisories/53109

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/53117

Source: secalert@redhat.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

Source: secalert@redhat.com

http://www.securityfocus.com/bid/59281

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1804-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=916774

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/83642

Source: secalert@redhat.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586

Source: af854a3a-2127-422b-91ae-364da2661108

http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/92543

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0753.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53109

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/53117

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/59281

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1804-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=916774

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/83642

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.