NVD

Id
15606  
Name
CVE-2010-4351  
Description
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances, which might allow context-dependent attackers to bypass the intended security policy by creating instances of ClassLoader.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-01-20  
Modified Date
2014-10-04  
Seq
2010-4351  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88390 15606 CVE-2010-4351 http://blog.fuseyism.com/index.php/2011/01/18/security-icedtea6-177-184-194-released/  View
88391 15606 CVE-2010-4351 FEDORA-2011-0521  View
88392 15606 CVE-2010-4351 FEDORA-2011-0500  View
88393 15606 CVE-2010-4351 GLSA-201406-32  View
88394 15606 CVE-2010-4351 DSA-2224  View
88395 15606 CVE-2010-4351 MDVSA-2011:054  View
88396 15606 CVE-2010-4351 RHSA-2011:0176  View
88397 15606 CVE-2010-4351 45894  View
88398 15606 CVE-2010-4351 USN-1052-1  View
88399 15606 CVE-2010-4351 USN-1055-1  View
88400 15606 CVE-2010-4351 ADV-2011-0165  View
88401 15606 CVE-2010-4351 ADV-2011-0166  View
88402 15606 CVE-2010-4351 ADV-2011-0215  View
88403 15606 CVE-2010-4351 ADV-2011-0239  View
88404 15606 CVE-2010-4351 http://www.zerodayinitiative.com/advisories/ZDI-11-014/  View
88405 15606 CVE-2010-4351 icedtea-jnlp-code-execution(64893)  View
88406 15606 CVE-2010-4351 https://bugzilla.redhat.com/show_bug.cgi?id=663680  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30862 JVNDB-2011-001101 IcedTea の JNLP SecurityManager におけるセキュリティポリシーを回避される脆弱性 IcedTea の JNLP SecurityManager は、checkPermission メソッドの例外処理に関して不備が存在するため、セキュリティポリシーを回避される脆弱性が存在します。 CVE-2010-4351 46931 CVE-2010-4351 15606 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001101.html 2011-01-20 2011-02-21 View