GCVE - cpe:2.3:a:redhat:icedtea:1.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:icedtea:1.7:*:*:*:*:*:*:*

part: a version: 1.7 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Icedtea (`06c7d7b5-7794-5e43-988f-40aada5f2075`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0025`	vulnerable	2026-06-08 04:56:33.520039	Details available IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source. Published: 2011-02-04T19:00:00.000Z Updated: 2024-08-06T21:43:13.999Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46110 http://www.ubuntu.com/usn/USN-1055-1 http://security.gentoo.org/glsa/glsa-201406-32.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/65151 http://www.debian.org/security/2011/dsa-2224	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4351`	vulnerable	2026-06-08 04:56:27.305467	Details available The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader. Published: 2011-01-20T18:00:00.000Z Updated: 2024-08-07T03:43:14.673Z Open on db.gcve.eu Reference links http://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released/ http://www.ubuntu.com/usn/USN-1055-1 http://security.gentoo.org/glsa/glsa-201406-32.xml http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053276.html http://www.securityfocus.com/bid/45894	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3860`	vulnerable	2026-06-08 04:55:17.629709	Details available IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories. Published: 2010-12-08T19:00:00.000Z Updated: 2024-08-07T03:26:12.234Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-201406-32.xml http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html http://secunia.com/advisories/43085 http://www.vupen.com/english/advisories/2011/0215 http://www.ubuntu.com/usn/USN-1024-1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.