6.8

CVE-2011-2514

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warning dialog box to represent a different filename than the file for which access will be granted.

Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Icedtea-web Version <= 1.0.3
Redhat ≫ Icedtea-web Version1.0
Redhat ≫ Icedtea-web Version1.0.1
Redhat ≫ Icedtea-web Version1.0.2
Redhat ≫ Icedtea-web Version1.1
Redhat ≫ Icedtea6 Version <= 1.8.8
Redhat ≫ Icedtea6 Version1.8
Redhat ≫ Icedtea6 Version1.8.1
Redhat ≫ Icedtea6 Version1.8.2
Redhat ≫ Icedtea6 Version1.8.3
Redhat ≫ Icedtea6 Version1.8.4
Redhat ≫ Icedtea6 Version1.8.5
Redhat ≫ Icedtea6 Version1.8.6
Redhat ≫ Icedtea6 Version1.8.7
Redhat ≫ Icedtea6 Version1.9.1
Redhat ≫ Icedtea6 Version1.9.2
Redhat ≫ Icedtea6 Version1.9.3
Redhat ≫ Icedtea6 Version1.9.4
Redhat ≫ Icedtea6 Version1.9.5
Redhat ≫ Icedtea6 Version1.9.6
Redhat ≫ Icedtea6 Version1.9.7
Redhat ≫ Icedtea6 Version1.9.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.88% 0.732
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P