Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2012-3423
HistoryAug 07, 2012 - 9:55 p.m.

CVE-2012-3423

2012-08-0721:55:01
CWE-119
redhat
web.nvd.nist.gov
35
icedtea-web
plugin
cve-2012-3423
arbitrary code execution
java applet
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.197

Percentile

96.4%

JSON

The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.

Affected configurations

Nvd
Node
redhaticedtea-webRange≤1.2
OR
redhaticedtea-webMatch1.0
OR
redhaticedtea-webMatch1.1
VendorProductVersionCPE
redhaticedtea-web*cpe:2.3:a:redhat:icedtea-web:*:*:*:*:*:*:*:*
redhaticedtea-web1.0cpe:2.3:a:redhat:icedtea-web:1.0:*:*:*:*:*:*:*
redhaticedtea-web1.1cpe:2.3:a:redhat:icedtea-web:1.1:*:*:*:*:*:*:*

References

Related

debiancve 1
prion 1
ubuntucve 1
nvd 1
cvelist 1
nessus 16
centos 1
openvas 26
redhat 1
oraclelinux 1
suse 5
freebsd 1
ubuntu 1
fedora 6
veracode 1
gentoo 1
debiancve
debiancve
CVE-2012-3423
2012-08-07 21:55:01
prion
prion
Code injection
2012-08-07 21:55:00
ubuntucve
ubuntucve
CVE-2012-3423
2012-07-31 00:00:00
nvd
nvd
CVE-2012-3423
2012-08-07 21:55:01
cvelist
cvelist
CVE-2012-3423
2012-08-07 21:00:00
nessus
nessus
Oracle Linux 6 : icedtea-web (ELSA-2012-1132)
2013-07-12 00:00:00
Fedora 18 : icedtea-web-1.3-1.fc18 (2012-14370)
2012-09-26 00:00:00
Mandriva Linux Security Advisory : icedtea-web (MDVSA-2012:122)
2012-09-06 00:00:00
centos
centos
icedtea security update
2012-07-31 23:18:48
openvas
openvas
Fedora Update for icedtea-web FEDORA-2012-14340
2012-09-22 00:00:00
Fedora Update for icedtea-web FEDORA-2012-14340
2012-09-22 00:00:00
RedHat Update for icedtea-web RHSA-2012:1132-01
2012-08-03 00:00:00
redhat
redhat
(RHSA-2012:1132) Important: icedtea-web security update
2012-07-31 00:00:00
oraclelinux
oraclelinux
icedtea-web security update
2012-07-31 00:00:00
suse
suse
icedtea-web: Update to 1.2.1 (bnc#) (important)
2012-08-10 21:08:31
update for icedtea-web (important)
2012-08-13 09:08:35
Security update for icedtea-web (important)
2012-08-09 20:08:29
freebsd
freebsd
Several vulnerabilities found in IcedTea-Web
2012-07-31 00:00:00
ubuntu
ubuntu
IcedTea-Web vulnerabilities
2012-07-31 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: icedtea-web-1.3-2.fc16
2012-09-21 23:56:26
[SECURITY] Fedora 18 Update: icedtea-web-1.3-1.fc18
2012-09-25 06:19:09
[SECURITY] Fedora 17 Update: icedtea-web-1.3-1.fc17
2012-09-21 23:53:11
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:39
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.197

Percentile

96.4%

JSON
Related for CVE-2012-3423
debiancve1prion1ubuntucve1nvd1cvelist1nessus16centos1openvas26redhat1oraclelinux1suse5freebsd1ubuntu1fedora6veracode1gentoo1