NetSight
IP …
medium5.8

CVE-2013-1926

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which…

Impact

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

Affected products

VendorProductAffected versions
RedhatIcedtea-Web
through 1.2.2
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
CanonicalUbuntu Linux
Versions 10.04, 11.10, 12.04, 12.10
OpensuseOpensuse
Version 12.2

References