Updated icedtea-web packages fix CVE-2013-6493

2014-02-1100:20:14

Gentoo Foundation

advisories.mageia.org

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

Percentile

5.1%

JSON

Updated icedtea-web packages fix security vulnerability: LiveConnect provides a gateway between the JavaScript engine in the web browser and Java applets. An insecure temporary file use flaw was found in the LiveConnect implementation in the IcedTea-Web browser plug-in. A malicious, local user could possibly use this flaw to inject or read the communication between a Java applet and web browser of a different user’s session (CVE-2013-6493).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchicedtea-web< 1.4.2-1icedtea-web-1.4.2-1.mga3
Mageia4noarchicedtea-web< 1.4.2-1icedtea-web-1.4.2-1.mga4