GCVE - cpe:2.3:a:redhat:icedtea:1.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:icedtea:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Icedtea (`06c7d7b5-7794-5e43-988f-40aada5f2075`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-5235`	vulnerable	2026-06-08 05:06:49.309446	Details available IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page. Published: 2015-10-09T14:00:00.000Z Updated: 2024-08-06T06:41:08.683Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2817-1 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html https://bugzilla.redhat.com/show_bug.cgi?id=1233697 http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167120.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5234`	vulnerable	2026-06-08 05:06:49.307225	Details available IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks. Published: 2015-10-09T14:00:00.000Z Updated: 2024-08-06T06:41:08.613Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2817-1 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167120.html http://www.securitytracker.com/id/1033780	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3860`	vulnerable	2026-06-08 04:55:17.629188	Details available IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories. Published: 2010-12-08T19:00:00.000Z Updated: 2024-08-07T03:26:12.234Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-32.xml http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html http://secunia.com/advisories/43085 http://www.vupen.com/english/advisories/2011/0215 http://www.ubuntu.com/usn/USN-1024-1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.