Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:icedtea-web:1.0.1:pre:*:*:*:*:*:*

part: a version: 1.0.1 update: pre

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductIcedtea Web (6a6b8624-2355-5143-b9e2-8e2ee7793c38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/icedtea-web purl2cpe 2026-06-01 10:12:57.351325
pkg:deb/ubuntu/icedtea-web purl2cpe 2026-06-01 10:12:57.351327
pkg:github/adoptopenjdk/icedtea-web purl2cpe 2026-06-01 10:12:57.351329
pkg:gitlab/redhat/icedtea-web purl2cpe 2026-06-01 10:12:57.351330
pkg:rpm/fedora/icedtea-web purl2cpe 2026-06-01 10:12:57.351332
pkg:rpm/opensuse/icedtea-web purl2cpe 2026-06-01 10:12:57.351333

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0706 vulnerable 2026-06-08 04:56:38.714190 Details available
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
Published: 2011-02-18T23:00:00.000Z
Updated: 2024-08-06T21:58:26.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.