icedtea-web vulnerabilities (Debian)
15 vulnerabilities.
-
icedtea-webDebian It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML... 7.5 High -
icedtea-webDebian It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip... 8.2 High -
icedtea-webDebian It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/>... 8.2 High -
icedtea-webDebian It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be... 6.3 Medium -
icedtea-webDebian IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of... 4.3 Medium -
icedtea-webDebian IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which... 6.8 Medium -
icedtea-webDebian The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and... 6.8 Medium -
icedtea-webDebian The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and... 5.0 Medium -
icedtea-webDebian The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2... 2.1 Low -
icedtea-webDebian The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute... 6.8 Medium -
icedtea-webDebian The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets... 5.8 Medium -
icedtea-webDebian Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x... 6.8 Medium -
icedtea-webDebian The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL... 7.5 High -
icedtea-webDebian The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an... 6.8 Medium -
icedtea-webDebian The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote... 4.3 Medium