CVEvulnerability
CVE-2011-0706
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
Affected configurations
• redhat icedtea-web 1.0
• redhat icedtea-web 1.0.1
• sun jdk 1.6.0
Related
Weakness · not in database (1)
References
- http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html lists.fedoraproject.org
- http://secunia.com/advisories/43350 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.debian.org/security/2011/dsa-2224 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 www.mandriva.com
- http://www.securityfocus.com/bid/46439 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=677332 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65534 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117 oval.cisecurity.org
- http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/ Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html lists.fedoraproject.org
- http://secunia.com/advisories/43350 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xml security.gentoo.org
- http://www.debian.org/security/2011/dsa-2224 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:054 www.mandriva.com
- http://www.securityfocus.com/bid/46439 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=677332 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65534 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117 oval.cisecurity.org