CVE-2013-1927

Published: Apr 29, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."

Affected (25)

Products: Redhat: Icedtea Web · Canonical: Ubuntu Linux · Opensuse: Opensuse

1 product

1 product

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Redhat Icedtea Web	Up to 1.2.2
Redhat Icedtea Web	Version 1.0.1
Redhat Icedtea Web	Version 1.0.2
Redhat Icedtea Web	Version 1.0.3
Redhat Icedtea Web	Version 1.0.4
Redhat Icedtea Web	Version 1.0.5
Redhat Icedtea Web	Version 1.0.6
Redhat Icedtea Web	Version 1.0
Redhat Icedtea Web	Version 1.1.1
Redhat Icedtea Web	Version 1.1.2
Redhat Icedtea Web	Version 1.1.3
Redhat Icedtea Web	Version 1.1.4
Redhat Icedtea Web	Version 1.1.5
Redhat Icedtea Web	Version 1.1.6
Redhat Icedtea Web	Version 1.1.7
Redhat Icedtea Web	Version 1.1
Redhat Icedtea Web	Version 1.2.1
Redhat Icedtea Web	Version 1.2
Redhat Icedtea Web	Version 1.3.1
Redhat Icedtea Web	Version 1.3

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.2

References (44)

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/cb58b31c450e

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/19f5282f53e8

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

Source: secalert@redhat.com

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Source: secalert@redhat.com

http://osvdb.org/92544

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0753.html

Source: secalert@redhat.com

http://secunia.com/advisories/53109

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/53117

Source: secalert@redhat.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

Source: secalert@redhat.com

http://www.securityfocus.com/bid/59286

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1804-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=884705

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/83640

Source: secalert@redhat.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

Source: secalert@redhat.com

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/cb58b31c450e

Source: af854a3a-2127-422b-91ae-364da2661108

http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/19f5282f53e8

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/92544

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0753.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/53109

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/53117

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/59286

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1804-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=884705

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/83640

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.