Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:icedtea:1.8.1:*:*:*:*:*:*:*
part: a version: 1.8.1 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Icedtea (06c7d7b5-7794-5e43-988f-40aada5f2075) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0025 |
vulnerable | 2026-06-08 04:56:33.521959 |
Details available
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source.
Published: 2011-02-04T19:00:00.000Z
Updated: 2024-08-06T21:43:13.999Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4351 |
vulnerable | 2026-06-08 04:56:27.311907 |
Details available
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.
Published: 2011-01-20T18:00:00.000Z
Updated: 2024-08-07T03:43:14.673Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3860 |
vulnerable | 2026-06-08 04:55:17.630953 |
Details available
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.
Published: 2010-12-08T19:00:00.000Z
Updated: 2024-08-07T03:26:12.234Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.