Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:icedtea-web:1.0:pre:*:*:*:*:*:*

part: a version: 1.0 update: pre

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductIcedtea Web (6a6b8624-2355-5143-b9e2-8e2ee7793c38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/icedtea-web purl2cpe 2026-06-01 10:12:57.357461
pkg:deb/ubuntu/icedtea-web purl2cpe 2026-06-01 10:12:57.357462
pkg:github/adoptopenjdk/icedtea-web purl2cpe 2026-06-01 10:12:57.357464
pkg:gitlab/redhat/icedtea-web purl2cpe 2026-06-01 10:12:57.357465
pkg:rpm/fedora/icedtea-web purl2cpe 2026-06-01 10:12:57.357466
pkg:rpm/opensuse/icedtea-web purl2cpe 2026-06-01 10:12:57.357468

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0706 vulnerable 2026-06-08 04:56:38.713660 Details available
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
Published: 2011-02-18T23:00:00.000Z
Updated: 2024-08-06T21:58:26.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.