CVEvulnerability

CVE-2010-4351

6.8 MEDIUM Published 2011-01-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.

Affected configurations

• redhat icedtea 1.7 • redhat icedtea 1.7.1 • redhat icedtea 1.7.2 • redhat icedtea 1.7.3 • redhat icedtea 1.7.4 • redhat icedtea 1.7.5 • redhat icedtea 1.7.6 • redhat icedtea 1.8 • redhat icedtea 1.8.1 • redhat icedtea 1.8.2 • redhat icedtea 1.8.3 • redhat icedtea 1.9 • redhat icedtea 1.9.1 • redhat icedtea 1.9.2 • redhat icedtea 1.9.3

Related

Weakness · not in database (1)

References