NVD

Id
45018  
Name
CVE-2012-3423  
Description
The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL terminators, which allows remote attackers to cause a denial of service (crash), obtain sensitive information from memory, or execute arbitrary code via a crafted Java applet.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2014-10-04  
Seq
2012-3423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225652 45018 CVE-2012-3423 http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=518  View
225653 45018 CVE-2012-3423 http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=863  View
225654 45018 CVE-2012-3423 http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.1/NEWS  View
225655 45018 CVE-2012-3423 http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d65bd94e0ba9  View
225656 45018 CVE-2012-3423 http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/d7375e2a9076  View
225657 45018 CVE-2012-3423 SUSE-SU-2012:0979  View
225658 45018 CVE-2012-3423 openSUSE-SU-2012:0981  View
225659 45018 CVE-2012-3423 openSUSE-SU-2012:0982  View
225660 45018 CVE-2012-3423 SUSE-SU-2013:0851  View
225661 45018 CVE-2012-3423 SUSE-SU-2013:1174  View
225662 45018 CVE-2012-3423 openSUSE-SU-2013:0826  View
225663 45018 CVE-2012-3423 openSUSE-SU-2013:0893  View
225664 45018 CVE-2012-3423 openSUSE-SU-2013:0966  View
225665 45018 CVE-2012-3423 RHSA-2012:1132  View
225666 45018 CVE-2012-3423 GLSA-201406-32  View
225667 45018 CVE-2012-3423 USN-1521-1  View
225668 45018 CVE-2012-3423 https://bugzilla.redhat.com/show_bug.cgi?id=841345  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27800 JVNDB-2012-003507 IcedTea-Web プラグインにおける重要な情報を取得される脆弱性 IcedTea-Web プラグインは、NUL ターミネータの無い NPVariant NPString を適切に処理しないため、メモリより重要な情報を取得される、または任意のコードを実行される脆弱性が存在します。 CVE-2012-3423 56661 CVE-2012-3423 45018 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003507.html 2012-06-01 2012-08-09 View