{"id":"CVE-2012-4540","aliases":["DEBIAN-CVE-2012-4540","DSA-2768-1","EUVD-2012-4468","GHSA-44v2-cg42-mx34","RHSA-2012:1434","openSUSE-SU-2024:10316-1"],"status":"published","title":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x...","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0344,"percentile":0.89057,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2012-11-11T11:00:00Z","modified":"2026-10-23T17:47:46Z","fixes":[{"ecosystem":"Debian:12","package":"icedtea-web","fixed_in":["1.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"icedtea-web","fixed_in":["1.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"icedtea-web","fixed_in":["1.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"icedtea-web","fixed_in":["1.4-3~deb7u2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web-debuginfo","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web-javadoc","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web-debuginfo","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web-javadoc","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web-debuginfo","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web-javadoc","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web-debuginfo","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web-javadoc","fixed_in":["0:1.2.2-1.el6_3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-3~deb7u2"}]}],"versions":["1.3.2-1","1.4-1","1.4-2","1.4-3~deb7u1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"icedtea-web-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"icedtea-web-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"icedtea-web-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"icedtea-web-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.el6_3"}]}]}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"icedtea-web"}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://icedtea.classpath.org/hg/release/icedtea-web-1.1/file/d759ec560073/NEWS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2013/dsa-2768","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/596a718be03f","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/56434","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1434.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-November/020775.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/51220","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00073.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79894","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/51374","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id?1027738","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-1625-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869040","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00071.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-September/024750.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/51206","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-11/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/62426","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/07/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:171","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1007960","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/e7970f3da5fe","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00065.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4540","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-44v2-cg42-mx34"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-4540","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1434","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.2/NEWS","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1434.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4540","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5235","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-4540","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2012-11-11T11:00:00Z","modified":"2024-08-06T20:42:53.644Z","updated_at":"2026-11-02T14:34:51.937988Z"}],"euvd":[{"id":"EUVD-2012-4468","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2012-11-11T11:00:00Z","modified":"2024-08-06T20:42:53Z","updated_at":"2026-11-03T01:56:07.373412Z"}],"ghsa":[{"id":"GHSA-44v2-cg42-mx34","title":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x...","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2022-05-14T02:05:10Z","modified":"2023-02-02T05:04:51Z","updated_at":"2026-11-02T14:51:58.308794Z"}],"nvd":[{"id":"CVE-2012-4540","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2012-11-11T13:00:54.073Z","modified":"2026-06-16T23:45:17.557Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:16.536025Z"}],"osv":[{"id":"CVE-2012-4540","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2012-11-11T13:00:54Z","modified":"2026-04-10T03:42:30.594434Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-4540","description":"Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a \"triggering event attached to applet.\" NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.","status":"published","published":"2012-11-11T13:00:54.073Z","modified":"2026-10-23T17:47:46.463594217Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DSA-2768-1","title":"icedtea-web - heap-based buffer overflow","status":"published","published":"2013-10-04T00:00:00Z","modified":"2026-03-09T01:20:11.564768Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10316-1","title":"icedtea-web-javadoc-1.6.2-3.3 on GA media","description":"These are all security issues fixed in the icedtea-web-javadoc-1.6.2-3.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:40.025018Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2012:1434","title":"Red Hat Security Advisory: icedtea-web security update","status":"published","published":"2024-09-15T20:23:18Z","modified":"2026-06-26T10:20:06Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}