CVE-2011-0706 PUBLISHED CVSS 7.5 HIGH

The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privileges via unknown vectors related to multiple signers and the assignment of "an inappropriate security descriptor."

EPSS 1.55% · 81.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
1.55%
81.3th percentile

Affected Products

VendorProductVersions
redhaticedtea-web1.0, 1.0, 1.0.1
n/an/an/a
sunjdk1.6.0

Timeline

References

Open in Interactive Console →