Lucene search

K
suseSuseSUSE-SU-2013:0434-1
HistoryMar 12, 2013 - 6:04 p.m.

Security update for Java (critical)

2013-03-1218:04:47
lists.opensuse.org
30

0.968 High

EPSS

Percentile

99.6%

This release of Icedtea6-1.12.4 fixes the following two
issues that allowed a remote attacker to execute arbitrary
code remotely by providing crafted images to the affected
code.

  • CVE-2013-0809: CVSS v2 Base Score: 6.8 (critical)
    (AV:N/AC:M/Au:N/C:P/I:P/A:P): Insufficient Information
    (CWE-noinfo)
  • CVE-2013-1493: CVSS v2 Base Score: 6.8 (critical)
    (AV:N/AC:M/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119)