Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-3422
HistoryAug 07, 2012 - 9:55 p.m.

CVE-2012-3422

2012-08-0721:55:01
CWE-119
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.6%

JSON

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instance_to_id_map hash is empty, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted web page, which causes an uninitialized memory location to be read.

Affected configurations

NVD
Node
redhaticedtea-webRange≤1.2
OR
redhaticedtea-webMatch1.0
OR
redhaticedtea-webMatch1.1

Related

ubuntucve 1
debiancve 1
veracode 2
prion 1
cve 1
cvelist 1
nessus 16
openvas 26
fedora 6
suse 5
centos 1
oraclelinux 1
redhat 1
freebsd 1
ubuntu 1
gentoo 1
ubuntucve
ubuntucve
CVE-2012-3422
2012-07-31 00:00:00
debiancve
debiancve
CVE-2012-3422
2012-08-07 21:55:01
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:55:12
Denial Of Service (DoS)
2019-05-02 04:42:39
prion
prion
Memory corruption
2012-08-07 21:55:00
cve
cve
CVE-2012-3422
2012-08-07 21:55:01
cvelist
cvelist
CVE-2012-3422
2012-08-07 21:00:00
nessus
nessus
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : icedtea-web vulnerabilities (USN-1521-1)
2012-08-01 00:00:00
openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0982-1)
2014-06-13 00:00:00
Oracle Linux 6 : icedtea-web (ELSA-2012-1132)
2013-07-12 00:00:00
openvas
openvas
RedHat Update for icedtea-web RHSA-2012:1132-01
2012-08-03 00:00:00
Fedora Update for icedtea-web FEDORA-2012-14316
2012-09-22 00:00:00
Fedora Update for icedtea-web FEDORA-2012-14316
2012-09-22 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: icedtea-web-1.3-1.fc18
2012-09-25 06:19:09
[SECURITY] Fedora 16 Update: icedtea-web-1.3-2.fc16
2012-09-21 23:56:26
[SECURITY] Fedora 17 Update: icedtea-web-1.3-1.fc17
2012-09-21 23:53:11
suse
suse
icedtea-web: Update to 1.2.1 (bnc#) (important)
2012-08-10 21:08:31
Security update for icedtea-web (important)
2012-08-09 20:08:29
update for icedtea-web (important)
2012-08-13 09:08:35
centos
centos
icedtea security update
2012-07-31 23:18:48
oraclelinux
oraclelinux
icedtea-web security update
2012-07-31 00:00:00
redhat
redhat
(RHSA-2012:1132) Important: icedtea-web security update
2012-07-31 00:00:00
freebsd
freebsd
Several vulnerabilities found in IcedTea-Web
2012-07-31 00:00:00
ubuntu
ubuntu
IcedTea-Web vulnerabilities
2012-07-31 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.2 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.6%

JSON
Related for NVD:CVE-2012-3422
ubuntucve1debiancve1veracode2prion1cve1cvelist1nessus16openvas26fedora6suse5centos1oraclelinux1redhat1freebsd1ubuntu1gentoo1