IcedTea Web vulnerabilities

2015-11-2400:00:00

ubuntu.com

119

6.8 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON

Releases

Ubuntu 15.10
Ubuntu 15.04
Ubuntu 14.04 ESM

Packages

icedtea-web - A web browser plugin to execute Java applets

Details

It was discovered that IcedTea Web incorrectly handled applet URLs. A
remote attacker could possibly use this issue to inject applets into the
.appletTrustSettings configuration file and bypass user approval.
(CVE-2015-5234)

Andrea Palazzo discovered that IcedTea Web incorrectly determined the
origin of unsigned applets. A remote attacker could possibly use this issue
to bypass user approval, or to trick the user into approving applet
execution. (CVE-2015-5235)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchicedtea-7-plugin< 1.5.3-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchicedtea-7-plugin-dbgsym< 1.5.3-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchicedtea-netx< 1.5.3-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchicedtea-netx-common< 1.5.3-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchicedtea-plugin< 1.5.3-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.04noarchicedtea-7-plugin< 1.5.3-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchicedtea-7-plugin-dbgsym< 1.5.3-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchicedtea-netx< 1.5.3-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchicedtea-netx-common< 1.5.3-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchicedtea-plugin< 1.5.3-0ubuntu0.15.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.10	noarch	icedtea-7-plugin	< 1.5.3-0ubuntu0.15.10.1	UNKNOWN
Ubuntu	15.10	noarch	icedtea-7-plugin-dbgsym	< 1.5.3-0ubuntu0.15.10.1	UNKNOWN
Ubuntu	15.10	noarch	icedtea-netx	< 1.5.3-0ubuntu0.15.10.1	UNKNOWN
Ubuntu	15.10	noarch	icedtea-netx-common	< 1.5.3-0ubuntu0.15.10.1	UNKNOWN
Ubuntu	15.10	noarch	icedtea-plugin	< 1.5.3-0ubuntu0.15.10.1	UNKNOWN
Ubuntu	15.04	noarch	icedtea-7-plugin	< 1.5.3-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	icedtea-7-plugin-dbgsym	< 1.5.3-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	icedtea-netx	< 1.5.3-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	icedtea-netx-common	< 1.5.3-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	icedtea-plugin	< 1.5.3-0ubuntu0.15.04.1	UNKNOWN