CVE-2011-0706
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."
Affected products
n/a · n/aReferences
http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=677332http://secunia.com/advisories/43350http://security.gentoo.org/glsa/glsa-201406-32.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/65534https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14117http://www.debian.org/security/2011/dsa-2224http://www.mandriva.com/security/advisories?name=MDVSA-2011:054http://www.securityfocus.com/bid/46439