CVE-2013-1926

EPSS 1.87%
Veröffentlicht 29.04.2013 22:55:08
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 25

NVD 25 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Icedtea-web Version <= 1.2.2

Redhat ≫ Icedtea-web Version 1.0

Redhat ≫ Icedtea-web Version 1.0.1

Redhat ≫ Icedtea-web Version 1.0.2

Redhat ≫ Icedtea-web Version 1.0.3

Redhat ≫ Icedtea-web Version 1.0.4

Redhat ≫ Icedtea-web Version 1.0.5

Redhat ≫ Icedtea-web Version 1.0.6

Redhat ≫ Icedtea-web Version 1.1

Redhat ≫ Icedtea-web Version 1.1.1

Redhat ≫ Icedtea-web Version 1.1.2

Redhat ≫ Icedtea-web Version 1.1.3

Redhat ≫ Icedtea-web Version 1.1.4

Redhat ≫ Icedtea-web Version 1.1.5

Redhat ≫ Icedtea-web Version 1.1.6

Redhat ≫ Icedtea-web Version 1.1.7

Redhat ≫ Icedtea-web Version 1.2

Redhat ≫ Icedtea-web Version 1.2.1

Redhat ≫ Icedtea-web Version 1.3

Redhat ≫ Icedtea-web Version 1.3.1

Canonical ≫ Ubuntu Linux Version 10.04 Update - Edition lts

Canonical ≫ Ubuntu Linux Version 11.10

Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts

Canonical ≫ Ubuntu Linux Version 12.10

Opensuse ≫ Opensuse Version 12.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.87%	0.765

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html

http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS

http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586

http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c

http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html

http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html

http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

http://osvdb.org/92543

http://rhn.redhat.com/errata/RHSA-2013-0753.html

http://secunia.com/advisories/53109

Vendor Advisory

http://secunia.com/advisories/53117

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:146

http://www.securityfocus.com/bid/59281

http://www.ubuntu.com/usn/USN-1804-1

https://bugzilla.redhat.com/show_bug.cgi?id=916774

https://exchange.xforce.ibmcloud.com/vulnerabilities/83642

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123

https://nvd.nist.gov/vuln/detail/CVE-2013-1926

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1926

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1926

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-1926