oval:org.mitre.oval:def:23241
| Definition Id: oval:org.mitre.oval:def:23241 | |||
| Oval ID: | oval:org.mitre.oval:def:23241 | ||
| Title: | ELSA-2012:1434: icedtea-web security update (Critical) | ||
| Description: | Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a "triggering event attached to applet." NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2012:1434-01 CVE-2012-4540 | Version: | 6 |
| Platform(s): | Oracle Linux 6 | Product(s): | icedtea-web |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:16594 | |||
| Oval ID: | oval:org.mitre.oval:def:16594 | ||
| Title: | Oracle Linux 6.x | ||
| Description: | The operating system installed on the system is Oracle Linux 6.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:oracle:linux:6 | Version: | 5 |
| Platform(s): | Oracle Linux 6 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:23241 | |||
