exploitDog

CVE-2011-0706

Опубликовано: 15 фев. 2011

Источник: redhat

CVSS2: 7.5

Описание

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

Отчет

This issue did not affect the versions of the java-1.6.0-openjdk package as shipped with Red Hat Enterprise Linux 5 and 6.

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-266

https://bugzilla.redhat.com/show_bug.cgi?id=677332IcedTea multiple signers privilege escalation

7.5 High

CVSS2

Связанные уязвимости

CVE-2011-0706

ubuntu

почти 15 лет назад

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

CVE-2011-0706

nvd

почти 15 лет назад

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

CVE-2011-0706

debian

почти 15 лет назад

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in Open ...

GHSA-6228-hc88-4m3g

github

больше 3 лет назад

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

7.5 High

CVSS2