Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-4540
HistoryNov 11, 2012 - 1:00 p.m.

CVE-2012-4540

2012-11-1113:00:00
CWE-189
[email protected]
web.nvd.nist.gov
40
cve-2012-4540
icedtea-web
security vulnerability
remote attack
denial of service
buffer overflow
code execution

9.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly execute arbitrary code via a crafted webpage that triggers a heap-based buffer overflow, related to an error message and a “triggering event attached to applet.” NOTE: the 1.4.x versions were originally associated with CVE-2013-4349, but that entry has been MERGED with this one.

References

Related

debian 2
nessus 18
openvas 21
veracode 1
ubuntucve 1
fedora 7
prion 2
suse 2
cvelist 1
debiancve 1
cve 1
securityvulns 2
centos 1
osv 1
ubuntu 1
oraclelinux 1
redhat 1
gentoo 1
debian
debian
[SECURITY] [DSA 2768-1] icedtea-web security update
2013-10-04 19:41:30
[SECURITY] [DSA 2768-1] icedtea-web security update
2013-10-04 19:41:50
nessus
nessus
openSUSE Security Update : icedtea-web (openSUSE-SU-2013:1509-1)
2014-06-13 00:00:00
SuSE 11.2 / 11.3 Security Update : icedtea-web (SAT Patch Numbers 8357 / 8358)
2013-10-03 00:00:00
Scientific Linux Security Update : icedtea-web on SL6.x i386/x86_64 (20121107)
2012-11-08 00:00:00
openvas
openvas
Fedora Update for icedtea-web FEDORA-2013-17026
2013-09-24 00:00:00
Debian Security Advisory DSA 2768-1 (icedtea-web - heap-based buffer overflow)
2013-10-04 00:00:00
Fedora Update for icedtea-web FEDORA-2013-17026
2013-09-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:47
ubuntucve
ubuntucve
CVE-2012-4540
2012-11-07 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: icedtea-web-1.4.1-0.fc19
2013-09-20 16:28:29
[SECURITY] Fedora 20 Update: icedtea-web-1.4.1-0.fc20
2013-09-23 00:27:02
[SECURITY] Fedora 18 Update: icedtea-web-1.3.1-1.fc18
2012-11-10 05:12:51
prion
prion
Design/Logic Flaw
2013-11-02 19:55:00
Heap overflow
2012-11-11 13:00:00
suse
suse
Security update for icedtea-web (critical)
2013-10-02 22:04:17
Security update for icedtea-web (important)
2015-09-22 11:10:12
cvelist
cvelist
CVE-2012-4540
2012-11-11 11:00:00
debiancve
debiancve
CVE-2012-4540
2012-11-11 13:00:00
cve
cve
CVE-2013-4349
2013-11-02 19:55:00
securityvulns
securityvulns
IcedTea-Web memory corruption
2012-11-09 00:00:00
[USN-1625-1] Icedtea-Web vulnerability
2012-11-09 00:00:00
centos
centos
icedtea security update
2012-11-08 20:06:41
osv
osv
icedtea-web - heap-based buffer overflow
2013-10-04 00:00:00
ubuntu
ubuntu
Icedtea-Web vulnerability
2012-11-07 00:00:00
oraclelinux
oraclelinux
icedtea-web security update
2012-11-07 00:00:00
redhat
redhat
(RHSA-2012:1434) Critical: icedtea-web security update
2012-11-07 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

9.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON
Related for CVE-2012-4540
debian2nessus18openvas21veracode1ubuntucve1fedora7prion2suse2cvelist1debiancve1cve1securityvulns2centos1osv1ubuntu1oraclelinux1redhat1gentoo1