NVD

Id
7744  
Name
CVE-2011-0706  
Description
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-18  
Modified Date
2014-10-04  
Seq
2011-0706  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43938 7744 CVE-2011-0706 http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/  View
43939 7744 CVE-2011-0706 FEDORA-2011-1631  View
43940 7744 CVE-2011-0706 FEDORA-2011-1645  View
43941 7744 CVE-2011-0706 oval:org.mitre.oval:def:14117  View
43942 7744 CVE-2011-0706 GLSA-201406-32  View
43943 7744 CVE-2011-0706 DSA-2224  View
43944 7744 CVE-2011-0706 MDVSA-2011:054  View
43945 7744 CVE-2011-0706 46439  View
43946 7744 CVE-2011-0706 icedtea-jnlpclassloader-priv-esc(65534)  View
43947 7744 CVE-2011-0706 https://bugzilla.redhat.com/show_bug.cgi?id=677332  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33973 JVNDB-2011-004215 OpenJDK Runtime Environment の IcedTea-Web における権限昇格の脆弱性 OpenJDK Runtime Environment の IcedTea-Web の JNLPClassLoader クラスには、権限を取得される脆弱性が存在します。 CVE-2011-0706 48613 CVE-2011-0706 7744 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004215.html 2011-02-15 2012-03-27 View